Webhooks (dashboard)

# Webhooks (dashboard) **Developer → Webhooks**. Register the HTTPS endpoints Self posts events to. For the delivery model, signatures, retries, and payloads, see the [Webhooks section](/docs/self-enterprise/webhooks/overview/).  ## Add an endpoint First pick the environment with the **Test | Live** tab strip at the top of the page — the endpoint you create is stamped with the selected environment. Then click **Add webhook** and fill in: * **Webhook URL** (required): the **full** public HTTPS URL including your handler's path, e.g. `https://yourapp.com/webhooks/self`, not just the domain. * **Name** (optional): a label for the endpoint. :::warning Always include the path. If you register a bare domain (`https://yourapp.com`), deliveries often land on your web app's page route instead of your webhook handler, where they're silently swallowed. ::: Click **Save**. The endpoint is saved right away and the **signing secret** (`whsec_...`) is revealed **once** in a banner. This is the only time you'll see it, copy it into your secret manager as `SELF_WEBHOOK_SECRET`. Every endpoint receives the `verification.completed` event; there's no per-endpoint event picker. Branch on `event.type` in your handler. See the [event catalog](/docs/self-enterprise/webhooks/events/). ## Verify the signature Once you have the `whsec_...` secret, wire up real signature verification so you only act on genuine events. See [Verify webhooks](/docs/self-enterprise/sdk/verify-webhooks/). ## Send a test request A saved endpoint has a **Send Test Request** button. It delivers a sample event to your URL and reports whether the endpoint accepted it (returned `2xx`). It's repeatable, use it to confirm your handler is reachable and responding before you rely on live traffic. Sending a test is optional and never required to save an endpoint. ## Managing endpoints Each saved endpoint shows its name, URL, and environment. You can: * **Send Test Request**: deliver a sample event (see above). * **Delete** it, which stops delivery to that URL. The signing secret is shown only once, at creation. To rotate it, delete the endpoint and recreate it, then update `SELF_WEBHOOK_SECRET` and redeploy. ## Related * [Webhooks: overview](/docs/self-enterprise/webhooks/overview/): delivery, retries, and idempotency. * [Signature verification](/docs/self-enterprise/webhooks/signature-verification/): how to validate a delivery. * [Event catalog](/docs/self-enterprise/webhooks/events/): every event and its payload.