Credentials & Webhooks

Manage API credentials and webhook endpoints from Settings > Organization.

App Credentials

Credentials are OAuth client credentials for server-to-server communication. They let your backend services authenticate with NextEpoch APIs.

Creating a Credential

1. Navigate to Settings > Organization > Credentials
2. Click Create Credential
3. Enter a name for the credential
4. Select the scopes this credential should have access to
5. Click Create

A success dialog shows the Client ID and Client Secret.

WARNING

The Client Secret is shown only once. Copy and save it immediately. It cannot be retrieved later.

Using a Credential

Exchange the client credentials for an access token:

curl -X POST https://auth.nextepoch.cloud/oauth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials&client_id=<client_id>&client_secret=<client_secret>"

Use the returned access token in the Authorization: Bearer <token> header for API calls.

Revoking a Credential

1. Click the revoke button next to the credential
2. Confirm the action

Revocation is immediate — all tokens issued with this credential become invalid. Revocation is recorded in the audit trail.

Credential Fields

Field	Description
Name	Display name
Client ID	Public identifier
Scopes	Permitted access scopes
Created	Creation date
Expires	Expiration date (if set)
Status	Active or Revoked

Webhooks

Webhooks let external services send data into your NextEpoch workspace. Each webhook gets a unique URL that accepts HTTP POST requests.

Creating a Webhook

1. Navigate to Settings > Organization > Webhooks
2. Click Create Webhook
3. Enter a name for the webhook
4. Configure the handler type and delivery settings
5. Click Create

A success dialog shows the Webhook URL. Copy it and configure it in your external service.

Webhook Fields

Field	Description
Name	Display name
Webhook URL	The URL to send data to
Handler	How incoming data is processed
Delivery	Delivery configuration
Status	Active or inactive
Created	Creation date

Managing Webhooks

• Edit — Update the name, handler, or delivery settings
• Delete — Permanently remove the webhook (with confirmation)

TIP

Webhook messages flow through the Air messaging system and appear in the Insights Conversations panel.

Next Steps

• Review the audit trail for credential and webhook activity
• API Reference for full OAuth endpoint documentation