How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Halliday Webhooks API

Register HTTPS endpoints to receive signed notifications when a workflow reaches a terminalstate, instead of polling for status. You subscribe to one or more event types per webhook.| Event type | Fires when a workflow's status becomes || --- | --- || `WORKFLOW_COMPLETED` | `COMPLETE` || `WORKFLOW_FAILED` | `FAILED` |All management endpoints live under `/orgs/webhooks` and authenticate with a secret API key(passed as a bearer token) that has webhook access. Publishable keys cannot manage webhooks.**Integration checklist**- Receiver is a public HTTPS endpoint (no private IPs).- Save the `signing_secret` when you create the webhook — it is shown only once.- Verify `X-Halliday-Signature` against the raw body, accepting any of its comma-separated signatures.- Respond `2xx` quickly and do the real work afterward.- Skip deliveries whose `id` you have already handled.

Halliday Webhooks API is one of 4 APIs that Halliday publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Webhook. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and a getting-started guide.

This API exposes 5 operations across 2 paths, and defines 27 schemas. It is described by OpenAPI 3.2.0, at version 2.0.0.

Requests are made against a single base URL, https://v2.prod.halliday.xyz.

5 operations 2 paths 27 schemas 1 DELETE1 GET1 PATCH2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2.0.0
Base URL
https://v2.prod.halliday.xyz
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Halliday Webhooks API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (API_KEY) (ApiKeyAuth). By default, every request must be authenticated.

Paths & Operations 5

Across 2 paths, the API surfaces 5 operations — 1 DELETE, 1 GET, 1 PATCH, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Webhooks 5

Register HTTPS endpoints to receive signed notifications when a workflow reaches a terminal state, instead of polling for status. You subscribe to one or more event types per webh…

POST
/orgs/webhooks
Register a webhook
registerWebhook body → 200400401403
GET
/orgs/webhooks
List webhooks
listWebhooks → 200401
PATCH
/orgs/webhooks
Update a webhook
updateWebhook body → 200400401404
DELETE
/orgs/webhooks
Delete a webhook
deleteWebhook body → 200401404
POST
/orgs/webhooks/rotate-secret
Rotate the signing secret
rotateWebhookSecret body → 200400401404

Schemas 27

The contract defines 27 schemas that model the data the API accepts and returns. The most detailed are AmountDownstreamIssue (8 properties), AmountIssue (8 properties), WebhookSummary (6 properties), RegisterWebhookRequest (5 properties). Each schema is shown below with its type and property counts.

ProviderIssue
object
2 properties 2 required
Token
string
Token identifier in the format "chain:address"
WebhookEventType
string
Event type a webhook can subscribe to. WORKFLOWCOMPLETED fires when a workflow's status becomes COMPLETE; WORKFLOWFAILED fires when it becomes FAILED.
PayinMethodIssue
object
2 properties 2 required
ErrorResponse
object
Error response for known errors
1 property 1 required
RotateSecretResponse
object
2 properties 2 required
ValidationErrorResponse
object
Returned when a request body fails schema validation. errors contains one entry per validation issue.
1 property 1 required
FundingIssue
object
3 properties 3 required
RotateSecretRequest
object
2 properties 1 required
UnknownIssue
object
2 properties 2 required
DeleteWebhookRequest
object
1 property 1 required
Asset
string
Identifier in the token format ("chain:address") or fiat currency code ("USD")
Limits
object
2 properties
UpdateWebhookRequest
object
3 properties 1 required
WebhookSummary
object
A registered webhook as returned by the list endpoint. Never includes the signing secret.
6 properties 6 required
Amount
string
A decimal amount string.
WebhookAuthHeader
object
Optional custom HTTP header that Halliday attaches to every delivery to your receiver URL, so your endpoint can authenticate inbound deliveries in addition to…
2 properties 2 required
OtherIssue
object
2 properties 2 required
Webhook
object
A registered webhook including its signing secret. Returned only on creation and rotation.
4 properties 4 required
RegisterWebhookRequest
object
5 properties 3 required
GeolocationIssue
object
2 properties 2 required
AmountIssue
object
8 properties 7 required
AmountDownstreamIssue
object
8 properties 7 required
WebhookDelivery
object
The signed JSON payload Halliday POSTs to your receiver URL.
4 properties 4 required
ListWebhooksResponse
object
1 property 1 required
OwnerIssue
object
3 properties 3 required
Issue

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

halliday-webhooks-api-openapi.yml Raw ↑

Other APIs Halliday publishes across the network.

Halliday Assets API
Halliday Chains API
Halliday Payments API
Where this information came from

This is an independent, third-party profile of Halliday Webhooks API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.