Destinations API

Manage forwarding destinations for your endpoints

A destination is a URL that Hookdrop forwards captured webhook events to. When an event arrives at your endpoint, Hookdrop enqueues a delivery to every active destination automatically. If a delivery fails, Hookdrop retries with exponential backoff.

---

List destinations

Returns all destinations configured for an endpoint.

curl https://hookdrop.dev/api/endpoints/ENDPOINT_ID/destinations \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

Path parameters

id · string · required

The endpoint ID.

Response

{
  "destinations": [
    {
      "id": "d1e2f3a4-b5c6-7890-abcd-ef1234567890",
      "endpoint_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "url": "https://your-server.com/webhooks",
      "secret": "whsec_abc123",
      "is_active": true,
      "created_at": "2026-04-01T11:00:00.000Z"
    }
  ]
}

destinations · array · required

List of destination objects.

Show destination properties

id · string

Unique identifier for the destination.

endpoint_id · string

ID of the parent endpoint.

url · string

The URL Hookdrop forwards events to.

secret · string

The signing secret used to generate the HMAC signature on forwarded requests. null if not set.

is_active · boolean

Whether this destination is currently receiving forwarded events.

created_at · string

ISO 8601 timestamp of when the destination was created.

---

Add a destination

Adds a new forwarding URL to an endpoint. From this point on, all incoming events will be forwarded to the new destination (as well as any existing ones).

Events are forwarded automatically with exponential backoff retries on failure.

curl -X POST https://hookdrop.dev/api/endpoints/ENDPOINT_ID/destinations \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-server.com/webhooks",
    "secret": "whsec_abc123"
  }'

Path parameters

id · string · required

The endpoint ID.

Request body

url · string · required

The URL to forward events to. Must be a valid HTTPS URL.

secret · string

An optional signing secret. When set, Hookdrop includes an HMAC-SHA256 signature on each forwarded request so your server can verify the payload.

Response

{
  "destination": {
    "id": "d1e2f3a4-b5c6-7890-abcd-ef1234567890",
    "endpoint_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "url": "https://your-server.com/webhooks",
    "secret": "whsec_abc123",
    "is_active": true,
    "created_at": "2026-04-01T11:00:00.000Z"
  }
}

---

Remove a destination

Removes a destination. Future events will no longer be forwarded to that URL. This does not affect events that have already been delivered or are currently in-flight.

curl -X DELETE https://hookdrop.dev/api/endpoints/ENDPOINT_ID/destinations/DESTINATION_ID \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"

Path parameters

id · string · required

The endpoint ID.

dId · string · required

The destination ID.

Response

{
  "ok": true
}