Skip to main content
ChangeBreaking
Portal-managed webhook subscriptions

Breaking

Webhook subscriptions are managed in the portal

Webhook subscriptions — the endpoint URL, the events you receive, and the signing secret — are now created and managed in the Dolfin portal under Webhooks, rather than through the API.The /v1/webhook-subscriptions endpoints no longer accept an x-dolfin-api-key. If your backend created, updated, or rotated subscriptions programmatically, those calls now return 403 Forbidden — move that setup into the portal. The portal also lists recent deliveries with their status, response code, and payload, and lets you replay a failed one.Delivery itself is unchanged. Existing subscriptions keep receiving events, signing secrets still work, and the event payloads, the Dolfin-Signature header, and the retry schedule are all the same. Only the management of subscriptions moved.See the webhooks guide for the current setup flow.