PEXA Notification Registration API

openapi: 3.2.0
info:
  title: Notification Service [$] Notification Registration API
  description: 'The Push Notifications Service handles delivering notifications via webhook to subscribers and manages the registration of subscribers for specific events. This API caters to various functions including updating, deleting, and creating registration details, as well as rotating the shared secret for secure communication. <br> <br> Pricing: <br> This API is a premium API service and usage of the API is billed. Please contact the API support team [here](mailto:apisupport@pexa.com.au) for more information. <br> <br> This API uses the OAuth 2.0 protocol for authentication and authorization. It supports the following OAuth 2.0 flow: <br> - Client Credentials <br> <br> Scopes are used to grant an application different levels of access to data. Each API endpoint will require specific scopes. <br> The scopes are listed against each API endpoint. <br> <br> For more information, see the following guides: <br> - [PEXA Webhooks Guide](../../docs/definitions/webhooks/)  <br> - [Authentication](../../../Exchange/docs/documentation/)

    '
  version: 1.0.0
  contact:
    email: apisupport@pexa.com.au
servers:
- url: https://api.pexa.com.au
  description: Production server
- url: https://api-tst.pexalabs.com.au
  description: Non-Prod server
tags:
- name: NotificationRegistration
  description: Registration related endpoints
paths:
  /v3/notification-registrations:
    post:
      tags:
      - NotificationRegistration
      summary: Create registration details (V3)
      description: Registers a webhook endpoint to start receiving PEXA event notifications, with support for enhanced authentication modes. Use authenticationMode HMAC for standard shared secret verification, or HMAC_OAUTH to additionally authenticate webhook delivery using OAuth 2.0 Client Credentials for integrators with strict inbound security requirements. Returns a system-generated shared secret that must be stored securely and used to verify the HMAC signature on all incoming webhook requests. The shared secret expires after 30 days and must be rotated before expiry. <br>Scopes:<br><i>create:notification_registrations</i> (non-prod)<br><i>create:notification_registrations</i> (prod)
      operationId: createNotificationRegistrationV3
      security:
      - oauth2:
        - create:notification_registrations
        tags:
        - Create registration V3
      requestBody:
        description: Registration details
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WebhookNotificationRegistrationRequest'
            examples:
              hmacOnly:
                summary: HMAC authentication
                value:
                  notificationType: WEBHOOK
                  eventTypes:
                  - WORKSPACE_PARTICIPANT_ADDED
                  - SECRET_EXPIRY
                  attributes:
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC
              hmacOauthPrivateKeyJwt:
                summary: HMAC + OAuth (private_key_jwt)
                value:
                  notificationType: WEBHOOK
                  eventTypes:
                  - WORKSPACE_PARTICIPANT_ADDED
                  - SECRET_EXPIRY
                  attributes:
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC_OAUTH
                    authConfig:
                      authUrl: https://auth.example.com/oauth/token
                      clientId: client-12345
                      clientAuthMethod: private_key_jwt
                      audience: https://api.example.com
                      scope: api.scope1 api.scope2
              hmacOauthClientSecret:
                summary: HMAC + OAuth (client_secret)
                value:
                  notificationType: WEBHOOK
                  eventTypes:
                  - WORKSPACE_PARTICIPANT_ADDED
                  - SECRET_EXPIRY
                  attributes:
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC_OAUTH
                    authConfig:
                      authUrl: https://auth.example.com/oauth/token
                      clientId: client-12345
                      clientAuthMethod: client_secret
                      clientSecret: secret-67890
                      scope: api.scope1 api.scope2
      responses:
        '200':
          description: SUCCESS
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookNotificationRegistrationResponseV3'
              examples:
                createRegistrationWithHMAC:
                  value:
                    notificationType: WEBHOOK
                    eventTypes:
                    - SECRET_EXPIRY
                    - CHECKLIST_CHECKED
                    sharedSecret: 38e5d78c-d642-42d1-8064-0082dc87c4e5
                    sharedSecretExpiry: '2025-03-13 04:12:51.574000 +00:00'
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC
                    registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                    subscriberId: '202'
                createRegistrationWithHMACOAUTH:
                  value:
                    notificationType: WEBHOOK
                    eventTypes:
                    - SECRET_EXPIRY
                    - CHECKLIST_CHECKED
                    sharedSecret: 38e5d78c-d642-42d1-8064-0082dc87c4e5
                    sharedSecretExpiry: '2025-03-13 04:12:51.574000 +00:00'
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC_OAUTH
                    authConfig:
                      authUrl: https://auth.example.com/oauth/token
                      clientId: client-12345
                      clientAuthMethod: private_key_jwt
                      audience: https://api.example.com
                      scope: api.scope1 api.scope2
                    registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                    subscriberId: '202'
                createRegistrationWithHMACOAUTHClientSecret:
                  value:
                    notificationType: WEBHOOK
                    eventTypes:
                    - SECRET_EXPIRY
                    - CHECKLIST_CHECKED
                    sharedSecret: 38e5d78c-d642-42d1-8064-0082dc87c4e5
                    sharedSecretExpiry: '2025-03-13 04:12:51.574000 +00:00'
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC_OAUTH
                    authConfig:
                      authUrl: https://auth.example.com/oauth/token
                      clientId: client-12345
                      clientAuthMethod: client_secret
                      scope: api.scope1 api.scope2
                    registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                    subscriberId: '202'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              examples:
                subscriberIdMissing:
                  summary: SubscriberId couldn't be fetched from token
                  value:
                    errors:
                    - code: GA.NOTIF.400009
                      message: SubscriberId couldn't be fetched from token
                      field: null
                webhookURIInvalid:
                  value:
                    errors:
                    - code: GA.NOTIF.400012
                      message: Webhook URI is invalid
                      field: webhookURI
                domainNotWhitelisted:
                  value:
                    errors:
                    - code: GA.NOTIF.400014
                      message: The webhook domain has not been whitelisted
                      field: webhookURI
                authenticationModeInvalid:
                  value:
                    errors:
                    - code: GA.NOTIF.400026
                      message: Invalid authentication mode
                      field: authenticationMode
                authConfigMissing:
                  summary: authConfig required for HMAC_OAUTH
                  value:
                    errors:
                    - code: GA.NOTIF.400027
                      message: authConfig is required when authenticationMode is HMAC_OAUTH
                      field: authConfig
                authUrlNotWhitelisted:
                  summary: Auth URL domain not whitelisted
                  value:
                    errors:
                    - code: GA.NOTIF.400029
                      message: The auth URL domain has not been whitelisted
                      field: authUrl
                clientIdInvalid:
                  summary: clientId is required
                  value:
                    errors:
                    - code: GA.NOTIF.400030
                      message: clientId is required and must not be blank
                      field: clientId
                clientAuthMethodInvalid:
                  summary: Invalid clientAuthMethod
                  value:
                    errors:
                    - code: GA.NOTIF.400031
                      message: Invalid clientAuthMethod
                      field: clientAuthMethod
                clientSecretMissing:
                  summary: clientSecret required for client_secret method
                  value:
                    errors:
                    - code: GA.NOTIF.400032
                      message: clientSecret is required when clientAuthMethod is client_secret
                      field: clientSecret
                authConfigNotAllowed:
                  summary: authConfig not allowed for HMAC mode
                  value:
                    errors:
                    - code: GA.NOTIF.400034
                      message: authConfig must not be provided when authenticationMode is HMAC
                      field: authConfig
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.401004
                  message: Unauthorized
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.403003
                  message: Forbidden
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - message: Internal Server Error
  /v3/notification-registrations/{registrationId}:
    put:
      tags:
      - NotificationRegistration
      summary: Update registration details (V3)
      description: Updates the webhook URI, event types, or authentication configuration for an existing registration. Supports switching between HMAC and HMAC_OAUTH modes. Use HMAC_OAUTH to add OAuth 2.0 Client Credentials authentication on top of HMAC for enhanced security. The shared secret is unchanged and not returned in this response. Use the secret rotation endpoint if you need to renew it. <br>Scopes:<br><i>edit:notification_registrations</i> (non-prod)<br><i>edit:notification_registrations</i> (prod)
      operationId: updateNotificationRegistrationV3
      security:
      - oauth2:
        - edit:notification_registrations
        tags:
        - Update registration V3
      parameters:
      - in: path
        name: registrationId
        schema:
          type: string
          format: uuid
        required: true
        description: UUID of the registration to update
        example: 28e5d78c-d642-42d1-8064-0082dc87c4e5
      requestBody:
        description: Updated registration details
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WebhookNotificationRegistrationRequest'
      responses:
        '200':
          description: SUCCESS
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookNotificationRegistrationUpdateResponseV3'
              examples:
                updateRegistrationWithHMAC:
                  value:
                    notificationType: WEBHOOK
                    eventTypes:
                    - SECRET_EXPIRY
                    - CHECKLIST_CHECKED
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC
                    registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                    subscriberId: '202'
                updateRegistrationWithHMACOAUTH:
                  value:
                    notificationType: WEBHOOK
                    eventTypes:
                    - SECRET_EXPIRY
                    - CHECKLIST_CHECKED
                    webhookURI: https://example.com/webhook
                    authenticationMode: HMAC_OAUTH
                    authConfig:
                      authUrl: https://auth.example.com/oauth/token
                      clientId: client-12345
                      clientAuthMethod: private_key_jwt
                      audience: https://api.example.com
                      scope: api.scope1 api.scope2
                    registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                    subscriberId: '202'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              examples:
                webhookURIInvalid:
                  value:
                    errors:
                    - code: GA.NOTIF.400012
                      message: Webhook URI is invalid
                      field: webhookURI
                authConfigMissing:
                  summary: authConfig required for HMAC_OAUTH
                  value:
                    errors:
                    - code: GA.NOTIF.400027
                      message: authConfig is required when authenticationMode is HMAC_OAUTH
                      field: authConfig
                authUrlNotWhitelisted:
                  value:
                    errors:
                    - code: GA.NOTIF.400029
                      message: The auth URL domain has not been whitelisted
                      field: authUrl
                clientSecretMissing:
                  value:
                    errors:
                    - code: GA.NOTIF.400032
                      message: clientSecret is required when clientAuthMethod is client_secret
                      field: clientSecret
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.401004
                  message: Unauthorized
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.403003
                  message: Forbidden
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.404007
                  message: 'Registration not found for given id: 091f7d22-88a9-4b64-bc51-e1ea8bb8dc42'
                  field: registrationId
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - message: Internal Server Error
  /v2/notification-registrations:
    get:
      tags:
      - NotificationRegistration
      summary: Get notification registrations
      description: Retrieve registration details. If registrationId parameter is provided, returns specified registration details. If not provided, returns an array of all registrations ordered by updated_at timestamp in descending order <br>Scopes:<br><i>view:notification_registrations</i> (non-prod)<br><i>view:notification_registrations</i> (prod)
      operationId: getNotificationRegistrationsV2
      security:
      - oauth2:
        - view:notification_registrations
        tags:
        - Get registration V2
      parameters:
      - in: query
        name: registrationId
        schema:
          type: string
          format: uuid
        required: false
        description: Optional registration ID to filter results. If not provided, returns all registrations ordered by updated_at timestamp in descending order.
        example: 28e5d78c-d642-42d1-8064-0082dc87c4e5
      - in: query
        name: page
        schema:
          type: integer
          default: 1
          minimum: 1
        required: false
        description: Determines which page of registrations to retrieve
      - in: query
        name: limit
        schema:
          type: integer
          default: 10
          minimum: 1
          maximum: 20
        required: false
        description: Number of records per page
      responses:
        '200':
          description: SUCCESS
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PagedNotificationRegistrations'
              examples:
                registrationWithHMAC:
                  summary: Registration with HMAC authentication
                  value:
                    page:
                      page: 1
                      totalRecords: 1
                      pageRecords: 1
                      limit: 10
                    records:
                    - notificationType: WEBHOOK
                      eventTypes:
                      - SECRET_EXPIRY
                      - CHECKLIST_CHECKED
                      integratorId: 344a6eb8-1201-4b80-a279-084713e300ef
                      integratorType: BROKER
                      registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                      subscriberId: '202'
                      sharedSecret: 38e5d78c-d642-42d1-8064-0082dc87c4e5
                      sharedSecretExpiry: '2025-03-13 04:12:51.574000 +00:00'
                      webhookURI: https://push-notifications.pexa.com.au/notifications-webhook
                      authenticationMode: HMAC
                registrationWithHMACOAUTH:
                  summary: Registration with HMAC + OAuth authentication
                  value:
                    page:
                      page: 1
                      totalRecords: 1
                      pageRecords: 1
                      limit: 10
                    records:
                    - notificationType: WEBHOOK
                      eventTypes:
                      - SECRET_EXPIRY
                      - CHECKLIST_CHECKED
                      integratorId: 344a6eb8-1201-4b80-a279-084713e300ef
                      integratorType: BROKER
                      registrationId: 28e5d78c-d642-42d1-8064-0082dc87c4e5
                      subscriberId: '202'
                      sharedSecret: 38e5d78c-d642-42d1-8064-0082dc87c4e5
                      sharedSecretExpiry: '2025-03-13 04:12:51.574000 +00:00'
                      webhookURI: https://push-notifications.pexa.com.au/notifications-webhook
                      authenticationMode: HMAC_OAUTH
                      authConfig:
                        authUrl: https://auth.example.com/oauth/token
                        clientId: client-12345
                        clientAuthMethod: private_key_jwt
                        audience: https://api.example.com
                        scope: api.scope1 api.scope2
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              examples:
                subscriberIdMissing:
                  summary: SubscriberId couldn't be fetched from token
                  value:
                    errors:
                    - code: GA.NOTIF.400009
                      message: SubscriberId couldn't be fetched from token
                      field: null
                invalidRegistrationId:
                  summary: Invalid registration ID format
                  value:
                    errors:
                    - code: GA.NOTIF.400000
                      message: Invalid UUID string
                      field: registrationId
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.401004
                  message: Unauthorized
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.403003
                  message: Forbidden
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - message: Internal Server Error
  /v1/notification-registrations:
    post:
      tags:
      - NotificationRegistration
      summary: Create registration details
      description: Registers a webhook endpoint to start receiving PEXA event notifications. Returns a system-generated shared secret that must be stored securely and used to verify the HMAC signature on all incoming webhook requests. The shared secret expires after 30 days and must be rotated before expiry. <br>Scopes:<br><i>create:notification_registrations</i> (non-prod)<br><i>create:notification_registrations</i> (prod)
      operationId: createNotificationRegistration
      security:
      - oauth2:
        - create:notification_registrations
        tags:
        - Create registration
      requestBody:
        description: Registration details
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateNotificationRegistrationRequest'
      responses:
        '200':
          description: SUCCESS
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationRegistrationCreateDto'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              examples:
                subscriberIdMissing:
                  summary: Subscriber Id is missing
                  value:
                    errors:
                    - code: GA.NOTIF.400009
                      message: Subscriber Id is missing
                      field: null
                webhookURIInvalid:
                  summary: Invalid webhook URI
                  value:
                    errors:
                    - code: GA.NOTIF.400012
                      message: Webhook URI is invalid
                      field: webhookURI
                eventTypeListEmpty:
                  summary: Event type list is empty
                  value:
                    errors:
                    - code: GA.NOTIF.400013
                      message: Must not be empty
                      field: eventTypes
                domainNotWhitelisted:
                  summary: Domain not whitelisted
                  value:
                    errors:
                    - code: GA.NOTIF.400014
                      message: The webhook domain has not been whitelisted
                      field: webhookURI
                eventTypeListInvalid:
                  summary: Event type list is invalid
                  value:
                    errors:
                    - code: GA.NOTIF.400015
                      message: 'Invalid eventTypes: ["Invalid_event1", "Invalid_event2"]'
                      field: eventTypes
                eventTypeListDuplicate:
                  summary: Event type list has duplicates
                  value:
                    errors:
                    - code: GA.NOTIF.400016
                      message: 'Duplicate eventTypes: ["CHECKLIST_CHECKED", "CHECKLIST_UNCHECKED"]'
                      field: eventTypes
                invalidFormat:
                  summary: Invalid format provided
                  value:
                    errors:
                    - code: GA.NOTIF.400017
                      message: Invalid format provided
                      field: webhookURI
                invalidJson:
                  summary: Invalid JSON
                  value:
                    errors:
                    - code: GA.NOTIF.400018
                      message: JSON parse error
                      field: null
                duplicateRegistration:
                  summary: Duplicate registration
                  value:
                    errors:
                    - code: GA.NOTIF.400019
                      message: Registration already exists with this combination
                      field: webhookURI
                mandatoryEventTypesMissing:
                  summary: Mandatory event types missing
                  value:
                    errors:
                    - code: GA.NOTIF.400020
                      message: Mandatory event types are missing
                      field: eventTypes
                additionalEventTypeMissing:
                  summary: An additional event type is required
                  value:
                    errors:
                    - code: GA.NOTIF.400021
                      message: There should be at least one more event present apart from mandatory event(s)
                      field: eventTypes
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.401004
                  message: Unauthorized
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - code: GA.NOTIF.403003
                  message: Forbidden
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              example:
                errors:
                - message: Internal Server Error
  /v1/notification-registrations/{registrationId}:
    put:
      tags:
      - NotificationRegistration
      summary: Update registration details
      description: Updates the webhook URI or event types for an existing registration. The shared secret is unchanged and not returned in this response. Use the secret rotation endpoint if you need to renew it. <br>Scopes:<br><i>edit:notification_registrations</i> (non-prod)<br><i>edit:notification_registrations</i> (prod)
      operationId: updateNotificationRegistration
      security:
      - oauth2:
        - edit:notification_registrations
        tags:
        - Update a subscriber's notification preference
      parameters:
      - in: path
        name: registrationId
        schema:
          type: string
        required: true
        description: UUID of the registration
      requestBody:
        description: Registration details
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateNotificationRegistrationRequest'
      responses:
        '200':
          description: SUCCESS
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationRegistrationDto'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotificationServiceErrorResponse'
              examples:
                subscriberIdMissing:
                  summary: Subscriber Id is missing
                  value:
                    errors:
                    - code: GA.NOTIF.400009
                      message: Subscriber Id is missing
                      field: null
                webhookURIInvalid:
                  summary: Invalid webhook URI
                  value:
                    errors:
                    - code: GA.NOTIF.400012
                      message: Webhook URI is invalid
                      field: webhookURI
                eventTypeListEmpty:
                  summary: Event type list is empty
                  value:
                    errors:
                    - code: GA.NOTIF.400013
                      message: Must not be empty
                      field: eventTypes
                domainNotWhitelisted:
                  summary: Domain not whitelisted
                  value:
                    errors:
                    - code: GA.NOTIF.400014
                      message: The webhook domain has not been whitelisted
                      field: webhookURI
                eventTypeListInvalid:
                  summary: Event type list is invalid
                  value:
                    errors:
                    - code: GA.NOTIF.400015
                      message: 'Invalid eventTypes: ["Invalid_event1", "Invalid_event2"]'
                      field: eventTypes
                eventTypeListDuplicate:
                  summary: Event type list has duplicates
                  value:
                    errors:
                    - code: GA.NOTIF.400016
                      message: 'Duplicate eventTypes: ["CHECKLIST_CHECKED", "CHECKLIST_UNCHECKED"]'
                      field: eventTypes
                invalidFormat:
                  summary: Invalid format provided
                  value:
                    errors:
                    - code: GA.NOTIF.400017
                      message: Invalid format provided
                      field: webhookURI
                invalidJson:
                  summary: Invalid JSON
                  value:
                    errors:
                    - code: GA.NOTIF.400018
                      message: JSON parse error
                      field: null
                duplicateRegistration:
                  summary: Duplicate registration
                  value:
                    errors:
                    - code: GA.NOTIF.400019
                      message: Registration already exists with this combination
                      field: webhookURI
                mandatoryEventTypesMissing:
                  summary: Mandatory event types missing
                  value:
                    errors:
                    - code: GA.NOTIF.400020
                      message: Mandatory event types are missing
                      field: eventTypes
                additionalEventTypeMissing:
                  summary: An additional event type is required
                  value:
                    errors:
                    - code: GA.NOTIF.400021
                      messa

# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/pexa/refs/heads/main/openapi/pexa-notificationregistration-api-openapi.yml