API referenceWebhooks
List webhooks
List the webhook endpoints configured for the caller's organization. Requires the manage capability.
The response is scoped to the caller's organization — webhooks owned by other organizations are never returned, and secrets are never included.
This endpoint returns the full set in one page (the response carries an empty nextCursor); no pagination parameters are accepted. Errors: 403 forbidden if the caller lacks the manage capability.
AuthorizationBearer <token>
Send Authorization: Bearer <token>. The token can be a login JWT from the frontend or an api-key for a script. JWT access comes from the person's organization role. Api-key access comes from the permissions saved on the key.
In: header
Response Body
application/json
application/json
curl -X GET "https://example.com/api/v1/webhooks"{ "data": [ { "active": true, "createdAt": 1719662400000, "customHeaders": { "X-Tenant": "acme" }, "events": [ "message", "poll.vote" ], "id": "wh_01J9...", "organizationId": "org_01J9ABC...", "retryPolicy": { "attempts": 15, "delaySeconds": 2, "policy": "exponential" }, "sessionId": "01J9ZX8K2QHV0M3T6R7P4N5W8C", "updatedAt": 1719662400000, "url": "https://example.com/webhooks/wa" } ], "nextCursor": "string"}{ "error": { "code": "not_found", "details": { "property1": null, "property2": null }, "message": "session not found" }}