> ## Documentation Index
> Fetch the complete documentation index at: https://docs.telemax.com.au/llms.txt
> Use this file to discover all available pages before exploring further.

# Link alert

> Links an alert configuration to an existing webhook.

### Overview

Adds an alert configuration to an existing webhook's subscription list. Idempotent — if the alert is already linked, the response is `200` with no change.

Use this when you want to add alerts one at a time after creation, rather than updating the full `alertIds` list via [`PUT /v2/api/webhooks/{id}`](/v2/api-reference/put-webhooks-id).

<Note>**Rate limit:** 4 req/s · 20/min · 600/hr · 14,400/day</Note>

### Endpoint

`POST /v2/api/webhooks/{id}/link-alert`

### Path parameters

<ParamField path="id" type="integer" required>
  Webhook ID.
</ParamField>

### Request body

```json theme={null}
{
  "alertId": 103
}
```

| Field   | Type    | Required | Description                                                                                                            |
| ------- | ------- | -------- | ---------------------------------------------------------------------------------------------------------------------- |
| alertId | integer | Yes      | Alert configuration ID to link (from [`GET /v2/api/companies/{id}/alerts`](/v2/api-reference/get-companies-id-alerts)) |

### Response

**200 OK** — empty body on success.

### Error responses

| Status | Meaning                                                                   |
| ------ | ------------------------------------------------------------------------- |
| 401    | Missing or invalid token                                                  |
| 403    | Webhook or alert does not belong to the caller's company                  |
| 404    | Webhook or alert configuration not found                                  |
| 422    | Unsupported alert type, or webhook already has 50 linked alerts (maximum) |

```bash theme={null}
curl -X POST "https://api.telemax.com.au/v2/api/webhooks/7/link-alert" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"alertId": 103}'
```


## OpenAPI

````yaml openapi.yaml POST /v2/api/webhooks/{id}/link-alert
openapi: 3.1.0
info:
  title: Telemax External API (V2)
  version: '2026-04-14'
  description: >
    Telemax External API — fleet telemetry, vehicle commands, and integrations.


    **Base URL:** `https://api.telemax.com.au`


    **Authentication:** All routes require a `Bearer` JWT unless marked
    `[AllowAnonymous]`.

    Obtain tokens via `POST /v2/api/authentication/token/api-key`.


    **RESTful architecture:** V2 uses standard HTTP methods (GET, POST, PUT,
    DELETE) with

    resource-based routes and consistent pagination via `page` and `pageSize`
    query parameters.


    **API versioning:** All responses will include an `X-API-Version` header
    containing the

    date-based version string (e.g. `2026-04-28`). See the
    [Changelog](/v2/changelog) for

    the deprecation policy and version history.


    For full documentation including error handling, pagination, and known field
    quirks, see [docs.telemax.com.au](https://docs.telemax.com.au).
servers:
  - url: https://api.telemax.com.au
security:
  - BearerAuth: []
paths:
  /v2/api/webhooks/{id}/link-alert:
    post:
      summary: Link alert to webhook (V2)
      description: Adds an alert configuration to an existing webhook's subscription list.
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: integer
          example: 7
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - alertId
              properties:
                alertId:
                  type: integer
                  example: 103
      responses:
        '200':
          description: '**200 OK** — Empty body. Alert linked successfully.'
          content:
            application/json:
              example: {}
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          description: >-
            **404 Not Found** — The webhook or alert does not exist or is not
            accessible.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
              examples:
                webhookNotFound:
                  summary: Webhook not found
                  value:
                    type: RESOURCE
                    code: NOT_FOUND
                    description: Webhook was not found.
                    requestId: 0HNLTALNU4DE6:00000003
                    docUrl: https://docs.telemax.com.au/errors/not-found
                alertNotFound:
                  summary: Alert not found
                  value:
                    type: RESOURCE
                    code: NOT_FOUND
                    description: Alert 99999 was not found.
                    requestId: 0HNLTALNU4DE6:00000004
                    docUrl: https://docs.telemax.com.au/errors/not-found
        '422':
          description: >-
            **422 Unprocessable Entity** — Alert type not supported, webhook
            already has 50 linked alerts, or webhook is global.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
              examples:
                tooManyAlerts:
                  summary: Too many linked alerts
                  value:
                    type: VALIDATION_ERROR
                    code: INVALID_INPUT
                    description: A webhook cannot be linked to more than 50 alerts.
                    requestId: 0HNLTALNU4DCA:00000003
                    docUrl: https://docs.telemax.com.au/errors/invalid-input
                globalWebhook:
                  summary: Cannot link alert to a global webhook
                  value:
                    type: VALIDATION_ERROR
                    code: INVALID_INPUT
                    description: Cannot link specific alerts to a global webhook.
                    requestId: 0HNLTALNU4DCM:00000001
                    docUrl: https://docs.telemax.com.au/errors/invalid-input
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalServerError'
components:
  responses:
    Unauthorized:
      description: >
        **401 Unauthorized** — JWT is missing, expired, or malformed.

        The JWT bearer middleware rejects the request before it reaches the
        controller.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          example:
            type: AUTHENTICATION
            code: INVALID_CREDENTIALS
            description: The provided API key is invalid or does not exist.
            requestId: 0HNLTALNU4DCO:00000004
            docUrl: https://docs.telemax.com.au/errors/invalid-credentials
    Forbidden:
      description: >
        **403 Forbidden** — Token is valid but the caller does not have access
        to the requested company or vehicle.

        Tokens issued for one company cannot access resources scoped to a
        different company in the hierarchy.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          example:
            type: AUTHORIZATION
            code: INVALID_SCOPE
            description: >-
              The provided token does not have permission to access this
              resource.
            requestId: 50e5c5f7-ccae-4ab6-b070-56d6645ceb1e
            docUrl: https://docs.telemax.com.au/errors/invalid-scope
    TooManyRequests:
      description: >
        **429 Too Many Requests** — Rate limit exceeded. Check the Retry-After
        header for the number of seconds to wait before retrying.

        Use exponential backoff: wait Retry-After seconds, then double the
        interval on each subsequent 429.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
        Retry-After:
          $ref: '#/components/headers/Retry-After'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          example:
            type: RATE_LIMIT
            code: RATE_LIMIT_EXCEEDED
            description: Too many requests. Please slow down.
            requestId: req_6d2f8b4a
            docUrl: https://docs.telemax.com.au/errors/rate-limit-exceeded
    InternalServerError:
      description: >
        **500 Internal Server Error** — An unexpected error occurred. Include
        the requestId when contacting support.
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/X-RateLimit-Limit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/X-RateLimit-Remaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/X-RateLimit-Reset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          example:
            type: SERVER_ERROR
            code: INTERNAL_SERVER_ERROR
            description: An unexpected error occurred. Please try again later.
            requestId: req_1e5a3c7d
            docUrl: https://docs.telemax.com.au/errors/internal-server-error
  schemas:
    ApiError:
      type: object
      description: Standard error response returned by all API endpoints.
      properties:
        type:
          type: string
          description: >-
            Error category (e.g. AUTHENTICATION, AUTHORIZATION, RESOURCE,
            VALIDATION_ERROR, RATE_LIMIT, SERVER_ERROR).
          example: AUTHENTICATION
        code:
          type: string
          description: Machine-readable error code within the category.
          example: INVALID_CREDENTIALS
        description:
          type: string
          description: Human-readable explanation of the error and how to resolve it.
          example: The provided API key is invalid or does not exist.
        requestId:
          type: string
          description: Unique request identifier for support correlation.
          example: req_7f3a2b1c
        docUrl:
          type: string
          format: uri
          description: Link to the relevant error documentation page.
          example: https://docs.telemax.com.au/errors/invalid-credentials
      required:
        - type
        - code
        - description
  headers:
    X-RateLimit-Limit:
      description: >-
        Maximum number of requests allowed per minute for this token. **Not yet
        active** — this header will be added once the rate-limit middleware is
        deployed. See the [Changelog](/v2/changelog) for the rollout date.
      schema:
        type: integer
        example: 60
    X-RateLimit-Remaining:
      description: >-
        Number of requests remaining in the current rate limit window. **Not yet
        active** — see `X-RateLimit-Limit`.
      schema:
        type: integer
        example: 47
    X-RateLimit-Reset:
      description: >-
        Unix timestamp (seconds) at which the current rate limit window resets.
        **Not yet active** — see `X-RateLimit-Limit`.
      schema:
        type: integer
        example: 1746000060
    Retry-After:
      description: Number of seconds to wait before retrying after a 429 response.
      schema:
        type: integer
        example: 30
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        JWT Bearer token obtained from `POST
        /v2/api/authentication/token/api-key`.


        **Lifetime:** ~24 hours (86,399 seconds). Cache the token and reuse it.
        Re-authenticate 5 minutes before expiry.


        **Scoping:** API key tokens are scoped to the company the key belongs to
        and may restrict

        access to a vehicle allowlist and/or action set (see token claims).


        **No refresh endpoint** — re-authenticate with your API key when the
        token expires.

````