List webhook endpoints
Lists every webhook endpoint in the key's mode, newest first, so you can see which of them is subscribed to what. This list is not paginated: `has_more` is always `false` and `next_cursor` always `null`. Signing secrets are not included; read one with `GET /webhooks/{id}/secret`.
Lists every webhook endpoint in the key's mode, newest first, so you can see which of them is subscribed to what. This list is not paginated: has_more is always false and next_cursor always null. Signing secrets are not included; read one with GET /webhooks/{id}/secret.
Authorization
secretKey Your secret key: sk_live_… or sk_test_….
In: header
Response Body
application/json
application/json
application/json
curl -X GET "https://example.com/webhooks"{ "items": [ { "object": "webhook", "webhook_id": "wh_3f2b8c1e9a4d4e7b8c2a1d5e6f7a8b9c", "url": "http://example.com", "description": "string", "event_types": [ "payment.succeeded" ], "disabled": true, "livemode": true, "created_at": "2019-08-24T14:15:22Z" } ], "has_more": true, "next_cursor": "string"}Retrieve an endpoint's signing secret GET
Returns the endpoint's `whsec_…` signing secret, for a server that has lost the copy it was given when the endpoint was created. Every delivery to this endpoint is signed with it, following the Standard Webhooks specification. The secret never changes: to rotate it, add a second endpoint, move your traffic across and delete the old one.
Update a webhook endpoint PATCH
Changes an endpoint's URL, description, subscribed event types, or whether it is disabled. Fields you leave out keep their values, and `event_types` replaces the whole list rather than adding to it; an empty list means every event type. A new URL is checked exactly as at creation. The signing secret never changes. While an endpoint is disabled, events are still recorded but nothing is delivered to it, and deliveries already queued for it are marked failed rather than held.