Subscribe a URL to events

post

https://api.sandbox.axispro.travel/api/external/v1/webhooks

Returns the signing secret once. Store it: it is never shown
again, and rotate-secret is the only way to get a new one.

Subscribing to some events also requires an extra scope, or the call
answers 403 WEBHOOK_EVENT_NOT_PERMITTED:

booking.* also requires bookings:read:all — the stream covers
every booking of the property, not just the ones this key created.
unit.* also requires housekeeping:read — the scope of
GET /units/{unit}/housekeeping, where every unit event's url
points.

A key limited to some properties must send property_ids, and only
its own. The url must be https and resolve to a public address;
anything else is an ordinary validation failure on url.

Scope: webhooks:write, plus bookings:read:all for booking events
and housekeeping:read for unit events

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

201Created. The only response that carries the secret.

401No key, or a key that is unknown, expired, revoked or deactivated — all answered identically on purpose, so a caller cannot learn which guesses are close. TENANT_INACTIVE (403) is the one credential failure with its own code, because the hotel can fix it. See Autenticación y API keys.

422Ordinary field validation failed. This shape carries no error_code — read errors, which names the fields and what is wrong with each. A handler that branches on error_code falls through to its generic case here and reports nothing useful. See Errores.