Events · People and access
api_key.created
API key created
An API key was created: an organization key, a personal key or a source key. The key value is never sent.
- Object type
- api_key
- Delivered to
- Endpoints with the admin role
Payload
idstringrequiredEvent ID (
evt_…), also sent as thewebhook-idheader. Use it to drop duplicate deliveries.typestringrequiredAllowed values:
api_key.createdcreated_atstring (date-time)requiredWhen the change happened (UTC).
org_idintegerrequiredapi_versionstringrequiredContract version of the
dataschema.sequenceintegerDelivery sequence number within the endpoint (absent for a test event).
payloadstringrequiredthinmeans nodata: read the object through the API.Allowed values:
fullthindataobjectFields
actor_idinteger | nullrequiredThe user who performed the action;
nullfor an organization API key or the platform itself.
testbooleanrequiredA test event sent by
POST /v1/webhooks/{webhook_id}/test.
Example delivery
{
"id": "evt_0123456789abcdef0123456789abcdef",
"type": "api_key.created",
"created_at": "2026-10-24T10:00:03Z",
"org_id": 1,
"api_version": "1.62.0",
"sequence": 1042,
"object": {
"type": "api_key",
"id": "14"
},
"payload": "full",
"data": {
"api_key": {
"id": 14,
"name": "CRM sync",
"prefix": "kb_3f9a",
"kind": "org",
"role": "editor",
"scopes": [
"cards:read",
"cards:write"
],
"expires_at": "2026-10-31T00:00:00Z"
},
"actor_id": 7
},
"test": false
}Receiving events
Each delivery is a POST request with this JSON body to your endpoint. Verify the webhook-signature header (Standard Webhooks) before you trust the body, answer with a 2xx status within a few seconds, and do the work afterwards. Deliveries to one endpoint keep the order of events; a failed delivery is retried with growing pauses.
New event types and new fields can appear at any time: skip the types and fields you do not know.