app.webhook_endpoints
TableRow level security on
Outbound webhook endpoints of an org (Section 10.1, ADR 0003). The signing secret lives in Supabase Vault; only its reference is stored here.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| url | text | No | HTTPS URL deliveries are posted to. Private network hosts are refused. |
| description | text | Yes | What the endpoint is for. |
| signing_secret_id | uuid | No | Vault secret id of the HMAC-SHA256 signing secret (vault.secrets). |
| disabled_at | timestamp with time zone | Yes | When the endpoint was turned off; disabled endpoints get no new deliveries. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |