Skip to main content
Webhook endpoint methods require paubox 2.0.0 or later. They are on Paubox::WebhooksClient, not on the Paubox::Client you use to send email.
Paubox::WebhooksClient manages webhook endpoints through the Paubox webhooks service at https://api.paubox.com/v1/webhooks. It sends a scoped API key as Authorization: Bearer YOUR_API_KEY. The key’s scopes decide which events it can subscribe to.

Create the client

When api_key: is omitted, the client uses webhooks_api_key from Paubox.configure:
Every method raises ArgumentError before sending a request if no key is set.

Events

The SDK doesn’t check event names. The API returns 422 for an unknown event and 403 for an event the key isn’t scoped for. Email API keys created in the Paubox Dashboard are limited to a sender domain, so subscribe to inbound mail in the Paubox Dashboard under Settings > Webhooks. For payloads and signature verification, see Webhooks.

List webhook endpoints

page: and items: are optional. The result is the parsed response, with data and page_info; page_info['count'] is the total number of endpoints, not the length of this page. Endpoints carrying an event the key isn’t scoped for are left out.

Create a webhook endpoint

target_url: must be an https URL that doesn’t point at a private or internal address. Each endpoint is a hash with id (a UUID), target_url, status (active or disabled), events, created_at, and updated_at. signing_secret is returned only by this call; store it when you create the endpoint. To replace a lost secret, delete the endpoint and create a new one.

Get a webhook endpoint

Update a webhook endpoint

Pass any of target_url:, status: ('active' or 'disabled'), and events:. Only the arguments you pass are sent. events: replaces the endpoint’s event list.

Delete a webhook endpoint

Returns true.

Error handling

A non-2xx response raises Paubox::WebhooksClient::Error with the API’s error text as its message, plus status_code, url, and response_body. Creating a second endpoint for the same target_url returns 422, and an ID that isn’t on your account returns 404. An ID that isn’t a UUID raises ArgumentError before any request is sent.