Webhook IP API

Getting started

Subscribe, copy your secret key, and verify your first webhook IP.

The Syndaq Webhook IP API checks whether a public IP matches Syndaq-maintained ranges for known webhook senders. Responses include matched and a list of provider IDs/names.

v1 scope: IP range matching against Syndaq's webhook provider list. Pair with provider signature verification when available—range match alone is not full webhook authenticity.

What you need

  1. A Webhook IP plan from the Syndaq API catalog.
  2. A secret key (wk_sec_) from the Syndaq client area after your order is provisioned.

Webhook IP lookups are server-side only. Send your secret key from your backend or trusted worker. Do not embed it in client-side code, mobile apps, or public repositories.

Base URL

All Webhook IP endpoints are served from:

https://api.syndaq.com/v1/webhookip/

Quick start

Replace wk_sec_YOUR_SECRET_KEY with the secret shown in Services for your Webhook IP subscription.

curl -sS "https://api.syndaq.com/v1/webhookip/lookup/140.82.112.1" \
  -H "Authorization: Bearer wk_sec_YOUR_SECRET_KEY"

You can also pass the IP as a query parameter, optionally filtering by provider:

curl -sS "https://api.syndaq.com/v1/webhookip/lookup?ip=140.82.112.1&provider=github" \
  -H "Authorization: Bearer wk_sec_YOUR_SECRET_KEY"

A successful response includes matched and a providers array when the IP falls in a known range.

How lookups work

StepWhat happens
1Authenticate with your secret key.
2Send the caller IP (and optional provider filter).
3Receive JSON with match results (including a cached flag when Syndaq already holds a recent result).

Private and reserved addresses return a clear error. Coverage is maintained by Syndaq and may expand over time.

Manage your subscription

Sign in to the Syndaq client area and open Services. Select your Webhook IP service to:

  • View usage and remaining monthly quota
  • Copy or rotate your secret key
  • Configure optional IP allowlists for API access

Next steps