Register and manage inbound/outbound webhooks via the Kustomer API

Steps

1. As an admin, generate an API key under Settings > Security > API Keys, selecting an API role to scope its permissions; the key is a signed JWT shown only once at creation time.
2. Authenticate all API calls with an Authorization: Bearer {API_KEY} header.
3. Register an outbound webhook via the create-outbound-webhook endpoint, supplying a name, destination url, optional headers, and an events array subscribing to object create/update events (Kustomer's outbound webhooks fire on Customer, Conversation, Message, User, and Team create/update events).
4. Update an existing outbound webhook's url, headers, or subscribed events via the corresponding update-outbound-webhook endpoint by id, and audit registered inbound web hooks via GET on the hooks/web endpoint (capped at 10 pages of 99 entries).
5. For inbound data ingestion, pick the right hook type: a 'web' hook requires the API key on incoming requests, a 'form' hook is a public endpoint with no authentication, and an 'email' hook parses JSON/JSON-LD out of emails sent to a generated address.
6. Check delivery health by listing transactions for a given webhook to confirm events are posting successfully.