# Criar uma assinatura

`POST https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions`

Assina os eventos cujo tipo corresponde aos seus padrões, entregues por webhook, pull ou stream.

## Parâmetros do caminho

- `workspace_id` (string), obrigatório: Seu workspace. Uma credencial vinculada a um workspace só pode indicar o próprio.

## Parâmetros do corpo

- `types` (array), obrigatório: De 1 a 20 padrões: `*`, um tipo exato ou um prefixo terminado em `.*`.
- `delivery` (object), obrigatório: Como os eventos chegam até você.
- `delivery.mode` ("webhook" | "pull" | "websocket"), obrigatório: `webhook` envia por POST para a sua URL; `pull` mantém uma caixa de entrada que você lê; `websocket` mantém uma caixa de entrada e a transmite em stream.
- `delivery.url` (string): Para `webhook`: uma URL `https` pública na porta 443, sem credenciais nem fragmento.

## Cabeçalhos

- `Authorization` (string), obrigatório: Bearer <chave de API>
- `Content-Type` (string), obrigatório: application/json, em uma chamada com corpo

## Requisição

**cURL**

```sh
curl -X POST "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions" \
  -H "Authorization: Bearer $INOVACC_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
}'
```

**TypeScript**

```ts
const body: Record<string, unknown> = {
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
};

const url = "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions";

const response = await fetch(url, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.INOVACC_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify(body),
});

console.log(response.status, await response.text());
```

**Python**

```py
import json
import os
import urllib.request

body = {
    "types": [
        "order.*",
    ],
    "delivery": {
        "mode": "webhook",
        "url": "https://hooks.example.com/inovacc",
    },
}

request = urllib.request.Request(
    "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions",
    data=json.dumps(body).encode(),
    method="POST",
    headers={
        "User-Agent": "inovacc-python-sample",
        "Authorization": "Bearer " + os.environ["INOVACC_API_KEY"],
        "Content-Type": "application/json",
    },
)

with urllib.request.urlopen(request) as response:
    print(response.status, response.read().decode())
```

**Go**

```go
package main

import (
	"fmt"
	"io"
	"net/http"
	"os"
	"strings"
)

const url = "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions"

const body = `{
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
}`

func main() {
	req, err := http.NewRequest("POST", url, strings.NewReader(body))
	if err != nil {
		panic(err)
	}
	req.Header.Set("Authorization", "Bearer "+os.Getenv("INOVACC_API_KEY"))
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	out, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(res.Status, string(out))
}
```

**Rust**

```rs
// Cargo.toml: reqwest = { version = "0.12", features = ["blocking", "json"] }
// Cargo.toml: serde_json = "1"

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let api_key = std::env::var("INOVACC_API_KEY")?;
    let body = serde_json::json!({
        "types": [
            "order.*"
        ],
        "delivery": {
            "mode": "webhook",
            "url": "https://hooks.example.com/inovacc"
        }
    });
    let response = reqwest::blocking::Client::new()
        .post("https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions")
        .bearer_auth(api_key)
        .json(&body)
        .send()?;
    println!("{} {}", response.status(), response.text()?);
    Ok(())
}
```

**JavaScript**

```mjs
const body = {
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
};

const url = "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions";

const response = await fetch(url, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.INOVACC_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify(body),
});

console.log(response.status, await response.text());
```

**PHP**

```php
<?php

$body = <<<'JSON'
{
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
}
JSON;

$curl = curl_init('https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions');
curl_setopt_array($curl, [
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('INOVACC_API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);
echo curl_getinfo($curl, CURLINFO_HTTP_CODE), ' ', $response, "\n";
curl_close($curl);
```

**Ruby**

```rb
require "net/http"
require "uri"

uri = URI('https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions')
body = <<~'JSON'
{
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
}
JSON

request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer #{ENV.fetch('INOVACC_API_KEY')}"
request["Content-Type"] = "application/json"
request.body = body

response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts "#{response.code} #{response.body}"
```

**Java**

```java
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String apiKey = System.getenv("INOVACC_API_KEY");
        String body = "{" +
                "\"types\": [" +
                "\"order.*\"" +
                "]," +
                "\"delivery\": {" +
                "\"mode\": \"webhook\"," +
                "\"url\": \"https://hooks.example.com/inovacc\"" +
                "}" +
                "}";

        HttpRequest request = HttpRequest.newBuilder()
                .uri(URI.create("https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions"))
                .header("Authorization", "Bearer " + apiKey)
                .header("Content-Type", "application/json")
                .method("POST", HttpRequest.BodyPublishers.ofString(body))
                .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
                .send(request, HttpResponse.BodyHandlers.ofString());
        System.out.println(response.statusCode() + " " + response.body());
    }
}
```

**C#**

```cs
using System.Text;

var body = "{" +
    "\"types\": [" +
    "\"order.*\"" +
    "]," +
    "\"delivery\": {" +
    "\"mode\": \"webhook\"," +
    "\"url\": \"https://hooks.example.com/inovacc\"" +
    "}" +
    "}";

var url = "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions";
var apiKey = Environment.GetEnvironmentVariable("INOVACC_API_KEY");

using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Post, url);
request.Headers.Add("Authorization", $"Bearer {apiKey}");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine($"{(int)response.StatusCode} {await response.Content.ReadAsStringAsync()}");
```

**Kotlin**

```kt
import java.net.URI
import java.net.http.HttpClient
import java.net.http.HttpRequest
import java.net.http.HttpResponse

fun main() {
    val apiKey = System.getenv("INOVACC_API_KEY")
    val body = "{" +
        "\"types\": [" +
        "\"order.*\"" +
        "]," +
        "\"delivery\": {" +
        "\"mode\": \"webhook\"," +
        "\"url\": \"https://hooks.example.com/inovacc\"" +
        "}" +
        "}"

    val request = HttpRequest.newBuilder()
        .uri(URI.create("https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions"))
        .header("Authorization", "Bearer " + apiKey)
        .header("Content-Type", "application/json")
        .method("POST", HttpRequest.BodyPublishers.ofString(body))
        .build()

    val response = HttpClient.newHttpClient()
        .send(request, HttpResponse.BodyHandlers.ofString())
    println("${response.statusCode()} ${response.body()}")
}
```

**Swift**

```swift
import Foundation
#if canImport(FoundationNetworking)
import FoundationNetworking
#endif

let body = #"""
{
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc"
  }
}
"""#

let apiKey = ProcessInfo.processInfo.environment["INOVACC_API_KEY"] ?? ""

let url = URL(string: "https://events.inovacc.dev/v1/workspaces/{workspace_id}/subscriptions")!
var request = URLRequest(url: url)
request.httpMethod = "POST"
request.setValue("Bearer \(apiKey)", forHTTPHeaderField: "Authorization")
request.setValue("application/json", forHTTPHeaderField: "Content-Type")
request.httpBody = Data(body.utf8)

let (data, response) = try await URLSession.shared.data(for: request)
let status = (response as? HTTPURLResponse)?.statusCode ?? 0
print(status, String(decoding: data, as: UTF8.self))
```

## Resposta

**201**

```json
{
  "subscription_id": "sub_01JCA4X9QY7M2KZ3N8PB5RT6VW",
  "types": [
    "order.*"
  ],
  "delivery": {
    "mode": "webhook",
    "url": "https://hooks.example.com/inovacc",
    "secret_ref": "managed"
  },
  "created_at": "2026-10-06T12:00:00.000Z",
  "signing_secret": "whsec_<shown once>"
}
```

**400**: invalid_body, invalid_subscription, invalid_delivery, invalid_url, url_not_https, url_has_credentials, url_port_not_allowed, url_destination_blocked

**401**: invalid_credentials

**403**: forbidden, account_required

**409**: too_many_subscriptions

**429**: rate_limited

**503**: service_unavailable, signing_unavailable

## Veja também

- [Autenticação](https://developer.inovacc.dev/pt-br/guides/authentication/)
- [Erros](https://developer.inovacc.dev/pt-br/guides/errors/)
- [Limites](https://developer.inovacc.dev/pt-br/guides/limits/)