Webhooks

This page describes the Webhook APIs Onshape provides for working with notifications.

Notifications are delivered to an application as an HTTP POST with a JSON body, which includes information about the identity of the registration request and information specific to the event and notification message.

Webhooks are an alternative approach to polling; instead of your application continuously asking Onshape for new information, webhooks automatically send a notification from Onshape any time an event you are subscribed to occurs.

An application may register for notifications to a URL that uses either HTTP or HTTPS. If HTTPS is specified by the URL template, the notification server must supply a certificate that is signed by a certificate authority (CA) recognized by Onshape. Self-signed certificates (as well as certificates signed by unrecognized CAs) will be rejected, causing notification delivery to fail.

📘 Notes

  • This page provides sample code as curls. See the curl documentation for more information.
  • All Onshape API calls must be properly authenticated by replacing the CREDENTIALS variable in the curls below. See the API Keys page for instructions and the Quick Start for an example. All applications submitted to the Onshape App Store must authenticate with OAuth2.
  • This documentation refers to Onshape IDs in the following format: {did}, {wid}, {eid}, {pid}, {otherId}. These represent document, workspace, element, part, and other IDs (respectively) that are needed make the API calls. We sometimes abbreviate these variables as DWVEM Please see API Guide: API Intro for information on what these IDs mean and how to obtain them from your documents. Sometimes, this page will use a stand-in string to represent these IDs (000000000000000000000000). Never include the curly braces ({}) in your API calls.
  • For Enterprise accounts, replace cad in all Onshape URLs with your company domain. https://cad.onshape.com > https://companyName.onshape.com

Events

Each type of event that an application may receive notifications for has a unique identifier known as the event type. Event types are grouped into Event Groups. Each group shares specification requirements.

Event types are categorized into several different groups based on the dominant user resource of the event. The group that a given event is part of defines the required parameters needed in the registration process to identify the resource or group of resources to watch. For instance, if registering for an event in the document event group, the application must identify either a specific document’s id or a specific company’s id. If registered for a company, the event will be registered for all present and future documents owned by the company.

📘 Note

You can see the full list of available events in the Glassworks API Explorer. Expand the createWebhook endpoint, then click Callbacks.

callbacks in the Glassworks Webhook > createWebhook > Callback page

Application Group

Monitor changes to applications.

Supported Event Types

  • onshape.user.lifecycle.updateappsettings - Occurs when user application settings are modified

Registration Requirements

  • clientId - Must be specified in the registration body
  • event - Must be set to onshape.user.lifecycle.updateappsettings
  • isTransient - Should be set to true to automatically clean up any webhooks after a period of inactivity.
  • options.collapseEvents - Must be set to true or false
  • url - Must be provided to receive the webhook notifications
{
  "clientId": "000000000000000000000000",
  "events": [
    "onshape.user.lifecycle.updateappsettings"
  ],
  "isTransient": true,
  "options": {
    "collapseEvents": false
  },
  "url": "https://sampleUrl.org"
}

Document Group

Monitor various aspects of document changes.

Supported Event Types

  • onshape.model.lifecycle.changed - Occurs when a change to a model is made
  • onshape.model.translation.complete - Occurs when a translation request is complete
  • onshape.model.lifecycle.metadata - Occurs when Part or element metadata is modified
  • onshape.model.lifecycle.createversion - Occurs when a new version of a document is created
  • onshape.model.lifecycle.createworkspace - Occurs when a new workspace is created
  • onshape.model.lifecycle.createelement - Occurs when a new element is created
  • onshape.model.lifecycle.deleteelement - Occurs when an element is deleted
  • onshape.document.lifecycle.statechange - Occurs when a document changes state
  • onshape.model.lifecycle.changed.externalreferences - Occurs when an external reference changes
  • onshape.document.lifecycle.created - Occurs when a document is created
  • onshape.revision.created - Occurs when a revision is created
  • onshape.comment.create - Occurs when a comment is created in a document
  • onshape.comment.update - Occurs when a comment is updated in a document
  • onshape.comment.delete - Occurs when a comment is deleted in a document

Registration Requirements

  • documentId OR companyId must be specified in the registration body

    • Only documentId is valid for the onshape.document.lifecycle.statechange
  • event - Must be set to one of the supported event types listed above

  • isTransient - Should be set to true to automatically clean up any webhooks after a period of inactivity

    • May be set to false if the application is always listening to webhook notifications and companyId is specified.
    • If false, unregister the webhook when it is no longer needed.
  • options.collapseEvents - Must be set to true or false

  • url - Must be provided to receive the webhook notifications

{
  "documentId": "000000000000000000000000",
  "events": [
    "onshape.user.lifecycle.updateappsettings"
  ],
  "isTransient": true,
  "options": {
    "collapseEvents": false
  },
  "url": "https://sampleUrl.org"
}

Workflow Group

Monitor release management actions.

Supported Event Types

  • onshape.workflow.transition - Occurs when a revision or release package transitions through workflow states

Registration Requirements

  • companyId - Must be specified in the registration body
  • event - Must be set to onshape.workflow.transition
  • isTransient - Should be set to true to automatically clean up any webhooks after a period of inactivity.
    • May be set to false if the application is always listening to webhook notifications.
    • If false, unregister the webhook when it is no longer needed.
  • options.collapseEvents - Must be set to true or false
  • url - Must be provided to receive the webhook notifications
{
  "companyId": "000000000000000000000000",
  "events": [
    "onshape.workflow.transition"
  ],
  "isTransient": true,
  "options": {
    "collapseEvents": false
  },
  "url": "https://sampleUrl.org"
}

Lifecycle Group

Monitor webhook changes. You do not need to register for these events; they are sent automatically when a webhook for another event type is registered, unregistered, or pinged.

Supported Event Types

  • webhook.register - Occurs in response to a notification registration API call
  • webhook.unregister - Occurs in response to a notification deregistation API call
  • webhook.ping - Occurs either:
    • In response to a request by an application to call the pingWebook endpoint.
    • As a post-registration validation initiated by Onshape

Endpoints

Webhook notifications allow an application to register to receive notifications of certain events that occur within the Onshape environment. To receive a notification, an application must expose an endpoint that Onshape can call.

  • Webhook/getWebhooks
      curl -X 'GET' \
        'https://cad.onshape.com/api/v6/webhooks?user={uid}&offset=0&limit=20' \
        -H 'aAccept: application/json;charset=UTF-8; qs=0.09' \
        -H 'Authorization: Basic CREDENTIALS' 
    
  • Webhook/createWebhook
      curl -X 'POST' \
        'https://cad.onshape.com/api/v6/webhooks' \
        -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
        -H 'Authorization: Basic CREDENTIALS' \
        -H 'Content-Type: application/json;charset=UTF-8; qs=0.09' \
        -d '{ 
              "events": [
                "eventType" // See the [Events](#events) section above for valid event types.
              ],
              "isTransient": true,
              "options": {
                "collapseEvents": true | false
              },
              "url": "https://sampleUrl.org"
    
              //Other parameters may be required. See the [Events](#events) section above.
    
            }'
    
  • Webhook/getWebhook
    curl -X 'GET' \
      'https://cad.onshape.com/api/v6/webhooks/webhookId' \
      -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
      -H 'Authorization: Basic CREDENTIALS' 
    
  • Webhook/updateWebhook
      curl -X 'POST' \
        'https://cad.onshape.com/api/v6/webhooks/webhookId' \
        -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
        -H 'Authorization: Basic CREDENTIALS' \
        -H 'Content-Type: application/json;charset=UTF-8; qs=0.09' \
        -d '{
              "id": "webhookId",
              "options": {
                "collapseEvents": true | false
              }
            }'  
    
    • Note that the webhook id must be sent in both the URL and the request body.
  • Webhook/unregisterWebhook
      curl -X 'DELETE' \
        'https://cad.onshape.com/api/v6/webhooks/{webhookId}?blockNotification=false' \
        -H 'accept: application/json;charset=UTF-8; qs=0.09' \
        -H 'Authorization: Basic CREDENTIALS' 
    
  • Webhook/pingWebhook
      curl -X 'POST' \
        'https://cad.onshape.com/api/v6/webhooks/{webhookId}/ping' \
        -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
        -H 'Authorization: Basic CREDENTIALS' 
    

Sample Workflows

Create a webhook

An application registers for event notification by:

  1. Making a REST call to the Onshape web service
  2. Providing a URL to notify
  3. Providing the required parameters for the event types to be registered

If the registration request is well-formed, the registration API call returns information about the registration, including a unique id string that identifies the webhook registration. This corresponds to the webhookId field in other endpoints. No de-duplication of notification registrations is performed by the API. Each registration call will yield a new registrationId, even if the parameters are identical to those passed in a prior call.

Shortly after an application calls the notification registration API, Onshape will make make an asynchronous trial notification call to the URL generated from the URL template with an event type of webhook.register to test if the application notification server is accessible. If the trial notification delivery fails to return an HTTP 200 status code, the notification registration is cancelled. The trial notification is usually delivered after the notification registration has been received by the application. However, variations in network delays may result in the trial notification occurring before the response is received and processed by the application, so the notification handler should be ready to process notifications before the registration call is made.

In this example, we use a webhook to send information from Onshape to another server. You need a URL for Onshape to send notifications to, and a way to view the messages sent with those notifications.

  1. Open an Onshape document, or create a new one.
  2. In this example, we want to receive a notification from Onshape any time a new version is created in the specified document. For this, we’ll use onshape.model.lifecycle.createversion as our event.
  3. The event type requires one parameter. We’ll use our documentId for this field (shown as 000000000000000000000000 in the example below).
  4. All events should specify isTransient=true. This will automatically clean up any webhooks after a period of inactivity.
  5. All event types require specifying true or false for the options.collapseEvents field. In this case, set the field to false.
  6. Next, we need the URL to send the notification to. You must provide your own URL to receive notifications here.
  7. Confirm your createWebhook call looks like this (substitute your own authorization credentials, document ID, and URL), then make the call.
  curl -X 'POST' \
    'https://cad.onshape.com/api/v6/webhooks' \
    -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
    -H 'Authorization: Basic CREDENTIALS' \
    -H 'Content-Type: application/json;charset=UTF-8; qs=0.09' \
    -d '{
        "documentId": "000000000000000000000000",
        "events": [
          "onshape.model.lifecycle.createversion"
        ],
        "isTransient": true,
        "options": {
          "collapseEvents": false
        },
        "url": "https://sampleUrl.org"
    }'
  1. In your application, confirm that you received the webhook.register event from Onshape.
  2. In Onshape, create a new version in your document.
  3. In your application, confirm that you received the onshape.model.lifecycle.createversion event from Onshape. Make note of the id in the response; use this as your webhookId in subsequent examples.

Get webhook info

  1. Complete the Create a webhook steps above to obtain a webhookId.
  2. Create your getWebhook call. substitute your own authorization credentials and webhookId (shown as 000000000000000000000000 in the example below), then make the call.
  curl -X 'GET' \
    'https://cad.onshape.com/api/v6/webhooks/000000000000000000000000' \
    -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
    -H 'Authorization: Basic CREDENTIALS' \
  1. Confirm that the event in the response is onshape.model.lifecycle.createversion.

Update a webhook

  1. Complete the Create a webhook steps above to obtain a webhookId. Note that in the same response, the webhook description is null.
  2. Create your updateWebhook call. In this example, ww update the webhook’s description. Substitute your own authorization credentials and webhookId (shown as 000000000000000000000000 in the example below in both the URL and request body). Then make the call.
  curl -X 'POST' \
    'https://cad.onshape.com/api/v6/webhooks/000000000000000000000000' \
    -H 'accept: application/json;charset=UTF-8; qs=0.09' \
    -H 'Authorization: Basic CREDENTIALS' \
    -H 'Content-Type: application/json;charset=UTF-8; qs=0.09' \
    -d '{
          "id": "000000000000000000000000",
          "description": "Send a notification each time a document version is created.",
          "options": {
            "collapseEvents": false
          }
      }'
  1. Confirm in the response that the webhook description is set to Send a notification each time a document version is created.

Delete a webhook

When an application no longer needs to be notified of changes specified by a particular notification registration, it should normally deregister the notification request. Deregistration is performed by making an HTTP that specifies the hook to deregister. Onshape will attempt to call the deregistered hook with an event type of webhook.unregister as validation that the deregistration is complete. If the application does not deregister the webhook, Onshape will continue delivering notifications until the the application either returns an error in response to a notification for the webhook or fails to respond at all for an extended period of time.

  1. Complete the Create a webhook steps above to obtain a webhookId.
  2. Create your deleteWebhook call. substitute your own authorization credentials and webhookId (shown as 000000000000000000000000 in the example below), then make the call.
  curl -X 'DELETE' \
    'https://cad.onshape.com/api/v6/webhooks/000000000000000000000000' \
    -H 'Accept: application/json;charset=UTF-8; qs=0.09' \
    -H 'Authorization: Basic CREDENTIALS=' \
  1. In your application, confirm that you received the webhook.unregister event from Onshape.
  2. In Onshape, create a new version in your document.
  3. In your application, confirm that no new events have been received.

Additional Resources