# `webhooks.url_not_allowed` — Webhook URL not allowed

**HTTP status:** 422  
**Retryable:** no — change the request or the flow first

## When it happens

Webhook URLs must be public `https://` addresses. Private, loopback and internal network addresses are refused.

## What to do

Use a publicly reachable HTTPS URL.

## Example response

```json
{
  "type": "https://quickota.com/developers/errors/webhooks.url_not_allowed",
  "title": "Webhook URL not allowed",
  "status": 422,
  "code": "webhooks.url_not_allowed",
  "detail": "Webhook URLs must be public \u0060https://\u0060 addresses. Private, loopback and internal network addresses are refused.",
  "suggestion": "Use a publicly reachable HTTPS URL.",
  "retryable": false,
  "requestId": "req_7f3a2c9e41d0b8a6c5e21f90"
}
```

See [Errors](https://quickota.com/developers/guides/errors) for how to handle errors in general.