Send a test webhook delivery
/v1/trust/policy/webhook-testSend a test webhook delivery.
Posts a signed test event to the organization's change-alert webhook so you can check your endpoint and your signature verification. The body is a JSON object with type (trust.test), organization, sent_at and an empty events list; a real delivery has type trust.subprocessor_changes and the changes in events. Every delivery carries X-VectorAxis-Timestamp (Unix seconds) and X-VectorAxis-Signature: sha256=<hex>, the HMAC-SHA256 of "<timestamp>.<body>" keyed with the webhook signing secret. The call times out after 10 seconds and does not follow redirects.
Requires an organization owner or admin and the Trust Pack controls in the plan.
Errors: 400 when no webhook URL is set, when the webhook answers with a status outside 200 to 299, or when it cannot be reached (the message says which); 402 when the plan does not include the Trust Pack controls; 403 for a caller who is not an organization owner or admin.
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Query parameters
organizationstringrequiredthe organization slug
Responses
The webhook accepted the test delivery.
deliveredbooleanAlways true: a failed delivery is answered with a 400 instead.
statusinteger<int32>The HTTP status your webhook answered with, from 200 to 299.