Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Your API key, sent as Authorization: Bearer <key>. A key is nrk_live_ or nrk_test_, a 26-character key id, _ and a 43-character secret. A key sees only its own environment's data.

Each key has one or more scopes: assess creates and reads assessments, records outcomes and reports key usage; history reads assessments, an account's current risk and an account's history, and erases an account; detailed adds the detailed view; webhooks registers, tests, rotates and deletes webhook endpoints; integrations registers and manages hosted provider integrations. A missing, unknown, revoked or expired key answers 401. A valid key without the scope an operation needs answers 403.

Path Parameters

endpoint_id
string
required

The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404. Opaque id of the endpoint registration.

Pattern: ^whe_[0-9A-HJKMNP-TV-Z]{26}$
event_id
string
required

The evt_ id of a delivery the endpoint's log holds, as GET /v1/webhooks/{endpoint_id}/deliveries lists it. An id that is malformed, not sent to this endpoint, past the log's retention or another workspace's answers 404. Opaque, workspace-scoped webhook event id. A redelivery of the same event carries the same event_id, so consumers deduplicate on it.

Pattern: ^evt_[0-9A-HJKMNP-TV-Z]{26}$

Body

application/json

POST /v1/webhooks/{endpoint_id}/deliveries/{event_id}/replay body: an empty object.

Response

The event is queued to be sent again.

The 202 answer of POST /v1/webhooks/{endpoint_id}/deliveries/{event_id}/replay: the event queued to be sent again.

endpoint_id
string
required

Opaque id of the endpoint registration.

Pattern: ^whe_[0-9A-HJKMNP-TV-Z]{26}$
event_id
string
required

The replayed event's id. The receiver sees the same id and body as the first time, with a new NR-Webhook-Timestamp and signature.

Pattern: ^evt_[0-9A-HJKMNP-TV-Z]{26}$
event_type
string
required

The event's type, as its body's type: assessment.updated, account.deleted or account.risk_changed.

Pattern: ^[a-z]+(\.[a-z_]+)+$