Brandfolder Webhooks API
The Brandfolder Webhooks service allows you to subscribe to event-based notifications (callbacks) when a qualifying event is triggered within Brandfolder. Asset data will then be sent to the user-provided `callback_url` at the time the subscribed event occurs within the specified Brandfolder. > NOTE: The `callback_url` must be accessible from the public internet, meaning any localhost, private network domains, or domains that require authentication will all fail.AuthenticationUtilizing Webhooks requires authentication with the resource (Brandfolder) being subscribed to. A user's unique API Key is required in a header for actions on all endpoints related to the Webhooks service.- Find your API key at https://brandfolder.com/profile#integrations.- Click the icon to the right of your key to copy it to your clipboard.There are two required headers in each request: `Content-Type: application/json` `Authorization: Bearer `The provided API Key is checked against any provided resource (where applicable) to confirm the appropriate permissions.___Service DetailsThe Brandfolder Webhooks service allows for subscriptions to events within individual Brandfolders. > NOTE: Asset data updates made at the Collection level will trigger a Brandfolder Webhook subscription. Since assets live at the Brandfolder level, any updates made at the Collection level would be reflected on the Brandfolder level as well, thus triggering a Webhook.Due to the way Brandfolder manages assets, you will see both an `"asset.create"` event and an `"asset.update"` event upon creation of a new asset. A `create` event is triggered when Brandfolder recognizes the new asset and begins to process it for use. An `update` event is triggered when the asset is ready for use.The following event types trigger webhooks:* `asset.create` - Asset creation. A new asset has been added to a subscribed Brandfolder.* `asset.update` - Asset update. Asset data has been updated within a subscribed Brandfolder. One or more of the following asset attributes has been updated: * Name * Description * Section * Approval status * Expiration status * Comments & Annotations * Adding / Updating * Deleting * Tags * Adding / Updating * Deleting * Custom Fields * Adding / Updating * Deleting* `asset.delete` - Asset deletion. An asset has been removed from within a subscribed Brandfolder.> Once a Webhook subscription as been created, the payload that will be sent to the user-provided `callback_url` after an event has been triggered will have the following structure:```json{ "data": { "attributes": { "key": "", "event_time": "", "event_type": "", "brandfolder_key": "", "organization_key": "" }, "webhook_id": "" }}```> NOTE: The callback payload is a "skinny" payload -- it indicates which assets changed and the type of event that occurred, but does not contain any data from the assets themselves.The Brandfolder Webhook service requires your application to immediately acknowledge receipt of any Webhooks by returning a `2xx` HTTP status code. If Brandfolder does not receive an acknowledgement or any non `2xx` HTTP status code is returned, Brandfolder will retry the Webhook up to 15 times with exponentially increasing wait times in between. **Any Webhook subscriptions that continue to fail without remedy will be made inactive.**Messages may be sent out of order to the `callback_url` associated with a Webhook subscription. The `event_time` provided in the payload can be used to order events.If the API Key associated with a Webhook subscription loses access to the associated resource, the subscription will be deactivated within 30 minutes.
Brandfolder Webhooks API is one of 13 APIs that Brandfolder publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Webhook. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.
This API exposes 5 operations across 3 paths, and defines 2 schemas. It is described by OpenAPI 3.2.0, at version v4.
Requests are made against a single base URL, https://brandfolder.com/api/v4.
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 1
Brandfolder Webhooks API declares
1 security scheme
for authenticating requests.
It accepts HTTP bearer tokens (APIToken).
By default, every request must be authenticated.
APIToken— API Token.
Paths & Operations 5
Across 3 paths, the API surfaces 5 operations — 1 DELETE, 2 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.
The Brandfolder Webhooks service allows you to subscribe to event-based notifications (callbacks) when a qualifying event is triggered within Brandfolder. Asset data will then be…
Schemas 2
The contract defines 2 schemas that model the data the API accepts and returns. The most detailed are WebhookAttributes (4 properties), Webhook (2 properties). Each schema is shown below with its type and property counts.
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Brandfolder 12
Other APIs Brandfolder publishes across the network.
This is an independent, third-party profile of Brandfolder Webhooks API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.