# Webhook Endpoint (/en/api-reference/objects/webhook-endpoint)

A webhook endpoint is a URL on your server where XPay sends event notifications, such as a payment succeeding or a refund completing. Each endpoint has a signing secret you use to verify that a delivery really came from XPay, and a list of enabled events that controls which notifications it receives. If deliveries to an endpoint keep failing, the endpoint is disabled automatically and its status changes to `disabled`.

## Fields

- `id` (string, required) — Unique identifier
- `object` (string, required) — Object type
- `url` (string, required) — The URL to send webhook events to
- `description` (string | null) — Human-readable description
- `status` (enum("enabled" | "disabled"), required) — Endpoint status
- `enabledEvents` (Array<string>, required) — List of enabled event types. Use ['*'] for all events.
- `livemode` (boolean, required) — Whether the endpoint exists in live mode (true) or test mode (false)
- `secret` (string) — Signing secret used to verify webhook deliveries. Only returned when the endpoint is created or its secret is rotated. Store it securely: it cannot be retrieved later.
- `metadata` (object, required) — Custom metadata
- `createdAt` (string (date-time), required) — Creation timestamp
- `updatedAt` (string (date-time), required) — Last update timestamp