Webhook Subscriptions

REST API to create and delete webhook subscriptions (the URLs that receive notifications). Use these endpoints to register or remove your endpoint.

Create a webhook subscription

post

Register a URL to receive webhook notifications. The subscription is scoped to the OAuth application associated with your access token.

A unique secret is generated for each subscription. Use this secret to verify the X-Signature header on incoming webhook deliveries (HMAC-SHA256).

Each URL can only be registered once per OAuth application.

Authorizations

bearerAuthoauth2

AuthorizationstringRequired

Pass the access token in the Authorization header:

Authorization: Bearer YOUR_ACCESS_TOKEN

Body

application/json

urlstring · uriRequired

The URL that will receive webhook POST requests

Example: https://your-app.com/webhooks/movemint

Responses

201

Webhook subscription created

application/json

A webhook subscription that receives event notifications via HTTP POST.

idinteger · int64Required

Unique identifier

urlstring · uriRequired

The URL that receives webhook POST requests

Example: https://your-app.com/webhooks/movemint

secretstringOptional

HMAC-SHA256 signing secret. Use this to verify the X-Signature header on incoming webhook deliveries. This value is only returned when the subscription is first created. Always present in create response.

Example: a1b2c3d4e5f6...

oauth_application_uidstringRequired

The UID of the OAuth application this subscription belongs to

athlete_idinteger · int64 · nullableRequired

ID of the athlete who created the subscription

created_atstring · date-timeRequired

Creation timestamp

updated_atstring · date-timeRequired

Last update timestamp

401

Unauthorized - invalid or missing token

application/json

404

OAuth application not found

application/json

422

Validation error (e.g., duplicate URL)

application/json

post/api/v1/webhook_subscriptions

HTTPcURLJavaScriptPython

POST /api/v1/webhook_subscriptions HTTP/1.1
Host: www.movemint.cc
Authorization: Bearer Paste your OAuth access token here
Content-Type: application/json
Accept: */*
Content-Length: 48

{
  "url": "https://your-app.com/webhooks/movemint"
}

{
  "id": 1,
  "url": "https://your-app.com/webhooks/movemint",
  "secret": "a1b2c3d4e5f6...",
  "oauth_application_uid": "text",
  "athlete_id": 1,
  "created_at": "2026-07-10T10:16:42.210Z",
  "updated_at": "2026-07-10T10:16:42.210Z"
}

Delete a webhook subscription

delete

Remove a webhook subscription. The subscription must belong to the OAuth application associated with your access token.

Authorizations

bearerAuthoauth2

AuthorizationstringRequired

Pass the access token in the Authorization header:

Authorization: Bearer YOUR_ACCESS_TOKEN

Path parameters

idinteger · int64Required

The ID of the webhook subscription to delete

Example: 42

Responses

204

Webhook subscription deleted successfully

No content

401

Unauthorized - invalid or missing token

application/json

403

Forbidden - subscription does not belong to your application

application/json

404

Webhook subscription not found

application/json

delete/api/v1/webhook_subscriptions/{id}

HTTPcURLJavaScriptPython

DELETE /api/v1/webhook_subscriptions/{id} HTTP/1.1
Host: www.movemint.cc
Authorization: Bearer Paste your OAuth access token here
Accept: */*

No content