Create webhook endpoint

POST

webhook-endpoints

curl --request POST \
  --url https://public-api.granola.ai/v1/webhook-endpoints \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "url": "https://example.com/granola-webhooks",
  "scopes": [
    "personal",
    "public"
  ],
  "events": [
    "note.access_granted",
    "note.edited",
    "note.generated",
    "note.regenerated"
  ]
}
'

import requests

url = "https://public-api.granola.ai/v1/webhook-endpoints"

payload = {
    "url": "https://example.com/granola-webhooks",
    "scopes": ["personal", "public"],
    "events": ["note.access_granted", "note.edited", "note.generated", "note.regenerated"]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    url: 'https://example.com/granola-webhooks',
    scopes: ['personal', 'public'],
    events: ['note.access_granted', 'note.edited', 'note.generated', 'note.regenerated']
  })
};

fetch('https://public-api.granola.ai/v1/webhook-endpoints', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://public-api.granola.ai/v1/webhook-endpoints",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'url' => 'https://example.com/granola-webhooks',
    'scopes' => [
        'personal',
        'public'
    ],
    'events' => [
        'note.access_granted',
        'note.edited',
        'note.generated',
        'note.regenerated'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://public-api.granola.ai/v1/webhook-endpoints"

	payload := strings.NewReader("{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://public-api.granola.ai/v1/webhook-endpoints")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://public-api.granola.ai/v1/webhook-endpoints")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "whe_2mKr8fQxLp7Ta3",
  "object": "webhook_endpoint",
  "url": "https://example.com/granola-webhooks",
  "events": [
    "note.access_granted",
    "note.edited",
    "note.generated",
    "note.regenerated"
  ],
  "scopes": [
    "personal",
    "public"
  ],
  "created_by": {
    "name": "Oat Benson",
    "email": "oat@granola.ai"
  },
  "enabled": true,
  "created_at": "2026-01-27T15:30:00Z",
  "signing_secret": "whsec_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

url

string<uri>

required

The publicly reachable HTTPS URL to deliver events to

Example:

"https://example.com/granola-webhooks"

scopes

enum<string>[]

required

Which notes to receive events for. personal covers notes you own, notes shared directly with you, and notes in private folders shared with you. public covers notes visible to everyone in the workspace. Pass both for both sets of notes. Workspace admins can disable scopes for non-admin members in the workspace's API settings.

Minimum array length: 1

Available options:

personal,

public

Example:

["personal", "public"]

events

enum<string>[]

Event names to subscribe to. Omit to subscribe to all events.

Minimum array length: 1

Available options:

note.access_granted,

note.edited,

note.generated,

note.regenerated

Example:

[
  "note.access_granted",
  "note.edited",
  "note.generated",
  "note.regenerated"
]

Response

Webhook endpoint created. The signing secret is only returned here.

string

required

The ID of the webhook endpoint

Pattern: ^whe_[a-zA-Z0-9]{14}$

Example:

"whe_2mKr8fQxLp7Ta3"

object

enum<string>

required

Available options:

webhook_endpoint

url

string<uri>

required

The HTTPS URL deliveries are sent to

Example:

"https://example.com/granola-webhooks"

events

enum<string>[]

required

The event names this endpoint is subscribed to

Available options:

note.access_granted,

note.edited,

note.generated,

note.regenerated

Example:

[
  "note.access_granted",
  "note.edited",
  "note.generated",
  "note.regenerated"
]

scopes

enum<string>[]

required

Which notes this endpoint receives events for. personal covers notes the creating user owns, notes shared directly with them, and notes in private folders shared with them. public covers notes visible to everyone in the workspace.

Available options:

personal,

public

Example:

["personal", "public"]

created_by

object

required

The user who created this endpoint.

Show child attributes

Example:

{
  "name": "Oat Benson",
  "email": "oat@granola.ai"
}

enabled

boolean

required

Whether deliveries are active

Example:

true

created_at

string<date-time>

required

The creation time of the webhook endpoint

Example:

"2026-01-27T15:30:00Z"

signing_secret

string

required

Secret for verifying delivery signatures (Standard Webhooks HMAC-SHA256). Shown only once, in this response — store it securely.

Example:

"whsec_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

Create webhook endpoint

curl --request POST \
  --url https://public-api.granola.ai/v1/webhook-endpoints \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "url": "https://example.com/granola-webhooks",
  "scopes": [
    "personal",
    "public"
  ],
  "events": [
    "note.access_granted",
    "note.edited",
    "note.generated",
    "note.regenerated"
  ]
}
'

import requests

url = "https://public-api.granola.ai/v1/webhook-endpoints"

payload = {
    "url": "https://example.com/granola-webhooks",
    "scopes": ["personal", "public"],
    "events": ["note.access_granted", "note.edited", "note.generated", "note.regenerated"]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    url: 'https://example.com/granola-webhooks',
    scopes: ['personal', 'public'],
    events: ['note.access_granted', 'note.edited', 'note.generated', 'note.regenerated']
  })
};

fetch('https://public-api.granola.ai/v1/webhook-endpoints', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://public-api.granola.ai/v1/webhook-endpoints",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'url' => 'https://example.com/granola-webhooks',
    'scopes' => [
        'personal',
        'public'
    ],
    'events' => [
        'note.access_granted',
        'note.edited',
        'note.generated',
        'note.regenerated'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://public-api.granola.ai/v1/webhook-endpoints"

	payload := strings.NewReader("{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://public-api.granola.ai/v1/webhook-endpoints")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://public-api.granola.ai/v1/webhook-endpoints")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"url\": \"https://example.com/granola-webhooks\",\n  \"scopes\": [\n    \"personal\",\n    \"public\"\n  ],\n  \"events\": [\n    \"note.access_granted\",\n    \"note.edited\",\n    \"note.generated\",\n    \"note.regenerated\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "whe_2mKr8fQxLp7Ta3",
  "object": "webhook_endpoint",
  "url": "https://example.com/granola-webhooks",
  "events": [
    "note.access_granted",
    "note.edited",
    "note.generated",
    "note.regenerated"
  ],
  "scopes": [
    "personal",
    "public"
  ],
  "created_by": {
    "name": "Oat Benson",
    "email": "oat@granola.ai"
  },
  "enabled": true,
  "created_at": "2026-01-27T15:30:00Z",
  "signing_secret": "whsec_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

Overview

API Reference

Updates

Authorizations

Body

Response