Skip to main content
V2 webhooks can monitor specific files or folders. They can be created in the Developer Console and with API.

​
Developer console

V2 webhooks can be created only when the scope Manage Webhooks is selected and the application is authorized. See more about Required Access Scopes and authorization.
To create a webhook follow the steps below.
  1. Navigate to your application in the Developer Console.
  2. Select the Webhooks tab.
  3. Click the Create webhook button.
  4. Select V2 from the drop-down list.
  5. Fill in the form.
  6. Click Create webhook button to save your changes.

​
Required fields

Field nameDescriptionRequired
URL AddressURL address to be notified by the webhook.Yes
Content typeType of content (file/folder) the webhook is configured for.Yes
TriggersDifferent triggers that activate the webhook.Yes

​
API

This API requires the application to have the Manage Webhooks scope enabled.
To attach a webhook to a folder, call the create webhook endpoint with the type of folder, the ID of the folder, a URL to send webhook notifications to, and a list of triggers. 
curl -i -X POST "https://api.box.com/2.0/webhooks" \
     -H "authorization: Bearer <ACCESS_TOKEN>" \
     -H "content-type: application/json" \
     -d '{
       "target": {
         "id": "21322",
         "type": "file"
       },
       "address": "https://example.com/webhooks",
       "triggers": [
         "FILE.PREVIEWED"
       ]
     }'
Webhooks do cascade, so if a webhook is set on a parent folder, it will also monitor sub-folders for the selected triggers.

​
Ownership

It is best practice and strongly recommended to create webhooks with a Service Account, or user that will not be deleted, to avoid potential issues with webhook delivery due to loss of access to content. Similar to files and folders, webhooks are owned by a user. If a user who owns a webhook is deleted, they will lose access to all files and folders that they previously had access to. Their webhooks will begin to fail validation, but the webhook service will continue to send events and require retries.

​
Webhook address

The notification URL specified in the address parameter must be a valid URL that you specify when you create a webhook. Every time one of the triggers is activated, this URL is called. The notification URL must use standard port 443 and should return an HTTP status in the range of 200 to 299 within 30 seconds of receiving the webhook payload.

​
Webhook triggers

The triggers are a list of strings that specify the events which cause the webhook to fire. For example, if you want the webhook to be triggered when a user uploads a file, use FILE.UPLOADED. You can find a list of available triggers in this guide.