Jelliu API documentation

Deletes the webhook. It stops receiving events immediately, and any delivery or retry already queued for it is dropped without being sent. The webhook disappears from GET /api/webhooks and its delivery log can no longer be read. There is no undelete: create a new webhook, which gets a new secret.

Side effects. Marks the webhook deleted and inactive. Written to the audit log as webhook.delete.

Idempotency. Safe to retry. A repeated call returns 404 Webhook not found, which you can treat as success.

Webhook events. Emits audit.log_recorded to webhooks subscribed to it. See Webhooks.

Access

Required scope: full. Human users need the owner or admin role.
Rate limit: General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See Rate limits.
Plan: Requires the webhook plan feature. Every plan includes it today, so this gate currently refuses nobody.

Deletes the webhook. It stops receiving events immediately, and any delivery or retry already queued for it is dropped without being sent. The webhook disappears from `GET /api/webhooks` and its delivery log can no longer be read. There is no undelete: create a new webhook, which gets a new secret. **Side effects.** Marks the webhook deleted and inactive. Written to the audit log as `webhook.delete`. **Idempotency.** Safe to retry. A repeated call returns `404 Webhook not found`, which you can treat as success. **Webhook events.** Emits `audit.log_recorded` to webhooks subscribed to it. See [Webhooks](/webhooks). **Access** - **Required scope:** `full`. Human users need the owner or admin role. - **Rate limit:** General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See [Rate limits](/rate-limits). - **Plan:** Requires the `webhook` plan feature. Every plan includes it today, so this gate currently refuses nobody.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Workspace API key: `jl_` followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (**Settings → API Keys**) and sent as `Authorization: Bearer jl_...`. The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys. | Scope | GET / HEAD | POST / PUT / PATCH / DELETE | Admin-only routes | | --- | --- | --- | --- | | `read` | Yes | No | No | | `write` | Yes | Yes | No | | `full` | Yes | Yes | Yes | Operations restricted to admins or owners reject keys without the `full` scope with `403`, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See [Authentication](/authentication).

Path parameters

webhookIdstringRequiredformat: "uuid"

UUID of the outbound webhook. It must belong to the authenticated workspace; an id from another workspace answers 404, exactly like an unknown one. Returned as id by GET /api/webhooks.

Response

Deleted. No body.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

Side effects. Marks the webhook deleted and inactive. Written to the audit log as webhook.delete.

Idempotency. Safe to retry. A repeated call returns 404 Webhook not found, which you can treat as success.

Webhook events. Emits audit.log_recorded to webhooks subscribed to it. See Webhooks.

Access

Required scope: full. Human users need the owner or admin role.
Rate limit: General API (120–600 requests/min per workspace, by plan) plus the configuration-mutations limit — 10 requests/min per workspace, shared with other configuration changes. See Rate limits.
Plan: Requires the webhook plan feature. Every plan includes it today, so this gate currently refuses nobody.