Create a webhook

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/webhooks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Security alerts",
  "type": "http",
  "url": "https://your-service.com/hooks/igris",
  "eventTypes": [
    "policy_deny",
    "anomaly",
    "session_suspended"
  ],
  "enabled": true
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: 'Security alerts',
    type: 'http',
    url: 'https://your-service.com/hooks/igris',
    eventTypes: ['policy_deny', 'anomaly', 'session_suspended'],
    enabled: true
  })
};

fetch('https://api.igrisecurity.com/api/v1/webhooks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/webhooks"

payload = {
    "name": "Security alerts",
    "type": "http",
    "url": "https://your-service.com/hooks/igris",
    "eventTypes": ["policy_deny", "anomaly", "session_suspended"],
    "enabled": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "id": "4d5e6f70-0000-4000-8000-00000000000a",
    "name": "Security alerts",
    "type": "http",
    "url": "https://your-service.com/...****",
    "eventTypes": [
      "policy_deny",
      "anomaly",
      "session_suspended"
    ],
    "enabled": true,
    "hasSecret": true,
    "secret": "whsec_3q2+7wXyZ...",
    "createdAt": "2026-01-01T00:00:00Z",
    "updatedAt": "2026-01-01T00:00:00Z"
  }
}

{
  "error": "webhook_url_mismatch_integration",
  "reason": "Slack webhooks must use hooks.slack.com"
}

{
  "error": "Unauthorized"
}

{
  "error": "plan_feature_unavailable",
  "feature": "custom-webhooks",
  "currentPlan": "free",
  "upgradeTo": "growth"
}

{
  "error": "URL must use HTTPS"
}