On This Page

URL Review and Approval Process

When a webhook subscription is created or updated, the URLs associated with that subscription are evaluated through a validation and approval process.

URL validation is designed to:

Reduce security risk
by preventing outbound calls to unapproved endpoints.

Improve compliance
through stronger review and approval controls.

Increase transparency
with clearer client-visible statuses.

Support scale
through a standardized and repeatable validation process.

URL validation applies to:

Webhook URL
(required)

OAuth URL
(if applicable)

Health Check URL
(if applicable)

Overview

A webhook subscription is created or updated.

Submitted URLs are checked against existing approval records.

New or unknown URLs are evaluated through manual validation.

If additional review is required, the subscription status changes to PENDING_REVIEW
.

If any URL is rejected or blocked, the subscription status changes to BLOCKED
.

If all required URLs are approved, the subscription status changes to INACTIVE
.

Status Descriptions

Status	Description
PENDING_REVIEW	One or more submitted URLs are being validated or awaiting required security approval. Review can take 1-2 business days.
BLOCKED	One or more URLs were rejected or identified as unsafe or non-compliant. The subscription cannot proceed until the URL(s) are updated.
INACTIVE	All required approvals are complete, and the subscription is ready under the existing activation flow.

If Your Subscription Is Marked BLOCKED

This means one or more URLs associated with the subscription cannot be used in their current form. To continue, the client must update the affected URL(s) and resubmit.