Retrieve an endpoint's signing secret
Returns the endpoint's `whsec_…` signing secret, for a server that has lost the copy it was given when the endpoint was created. Every delivery to this endpoint is signed with it, following the Standard Webhooks specification. The secret never changes: to rotate it, add a second endpoint, move your traffic across and delete the old one.
Returns the endpoint's whsec_… signing secret, for a server that has lost the copy it was given when the endpoint was created. Every delivery to this endpoint is signed with it, following the Standard Webhooks specification. The secret never changes: to rotate it, add a second endpoint, move your traffic across and delete the old one.
Authorization
secretKey Your secret key: sk_live_… or sk_test_….
In: header
Path Parameters
The webhook endpoint's id, which starts with wh_.
^wh_[0-9a-f]{32}$Response Body
application/json
application/json
application/json
curl -X GET "https://example.com/webhooks/wh_3f2b8c1e9a4d4e7b8c2a1d5e6f7a8b9c/secret"{ "secret": "string"}Retrieve a webhook endpoint GET
Returns one webhook endpoint: its URL, the event types it is subscribed to and whether it is disabled. The signing secret is not part of this response; read it with `GET /webhooks/{id}/secret`.
List webhook endpoints GET
Lists every webhook endpoint in the key's mode, newest first, so you can see which of them is subscribed to what. This list is not paginated: `has_more` is always `false` and `next_cursor` always `null`. Signing secrets are not included; read one with `GET /webhooks/{id}/secret`.