POSTs signed with HMAC-SHA256 of the raw body in X-Enrich-Signature (sha256=<hex>), keyed by the signingSecret returned on create — it is shown only once. Slack alerts go to an incoming-webhook URL. A failed delivery is retried every 15 minutes.403.curl --location 'https://dev.enrich.so/api/v3/domain-intel/watchlists' \
--header 'x-api-key: <api-key>' \
--header 'Content-Type: application/json' \
--data '{
"name": "Competitor accounts",
"companies": [
"acme.com",
"beta.io"
],
"webhookUrl": "https://example.com/hooks/enrich"
}'{
"success": true,
"data": {
"id": "6720b1f2c3d4e5f6a7b8c9d0",
"name": "Competitor accounts",
"companies": [
"acme.com"
],
"webhookUrl": "https://example.com/hooks/enrich",
"slackWebhookUrl": null,
"signingSecret": "whsec_3f9a…",
"lastAsOf": "2026-10-27T06:00:00Z",
"lastDeliveredAt": null,
"lastError": null,
"createdAt": "2026-10-27T06:00:00Z"
},
"meta": {
"requestId": "664f2b3c9a1e4d0012abcdef",
"creditsUsed": 0,
"creditsRemaining": 5000
}
}