import { createAdminClient } from '@spree/admin-sdk'

const client = createAdminClient({
  baseUrl: 'https://your-store.com',
  secretKey: 'sk_xxx',
})

const endpoint = await client.webhookEndpoints.create({
  name: 'Order pipeline',
  url: 'https://example.com/webhooks/orders',
  active: true,
  subscriptions: ['order.placed', 'order.canceled'],
})

// The plaintext `secret_key` is returned exactly once on create — persist it
// immediately so you can verify incoming webhook signatures. Subsequent reads
// will return `null`.
const signingSecret = endpoint.secret_key

spree api post /webhook_endpoints -d '{"name":"Order pipeline","url":"https://example.com/webhooks/orders","active":true,"subscriptions":["order.placed","order.canceled"]}'

{
  "id": "whe_gbHJdmfrXB",
  "name": "CI integration",
  "url": "https://ci.example.com/webhooks",
  "active": true,
  "subscriptions": [
    "order.placed"
  ],
  "disabled_reason": null,
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z",
  "disabled_at": null,
  "secret_key": "f44b508d518f47b9d42ae8a67ba913f7f7c4ee25be2e4dda1fbc06370fe29854",
  "last_delivery_at": null,
  "recent_delivery_count": 0,
  "recent_failure_count": 0,
  "total_delivery_count": 0,
  "successful_delivery_count": 0,
  "failed_delivery_count": 0
}

{
  "error": {
    "code": "validation_error",
    "message": "Url must be a valid http or https URL",
    "details": {
      "url": [
        {
          "value": "not a url",
          "code": "invalid",
          "message": "must be a valid http or https URL",
          "specific": true
        }
      ]
    }
  }
}