Repository admins get a Webhooks section in settings: add an endpoint with its events, copy the signing secret shown once, then edit it, turn it back on after Ghost disabled it, send a test ping, delete it, and read recent deliveries with their payload, headers and responses, each with a Redeliver button.