Registers a webhook endpoint URL for the authenticated organisation. PCX will POST transaction update events to this URL as they occur. The organisation identity is derived from the API key — no explicit org_id is needed in the request body.
API key issued by PCX. Pass the full key string in the X-API-Key request header. The key encodes your organisation and user identity and is verified on every request.
The HTTPS URL that PCX will POST transaction events to. Must be publicly reachable and return a 2xx response to acknowledge receipt.
"https://yourapp.com/webhooks/pcx"