---
title: "Get webhook fields for a trigger source"
method: GET
path: "/api/trigger-sources/{source}/fields"
tags: ["Agent Triggers"]
---

# Get webhook fields for a trigger source

`GET /api/trigger-sources/{source}/fields`

## Request

- Base URL: `https://app.cotool.ai`
- URL: `https://app.cotool.ai/api/trigger-sources/{source}/fields`
- Auth: HTTP bearer

Generate a webhook URL, secret, and any additional fields required to configure an external webhook, before the trigger is assigned to an agent.

## Path parameters

- `source` string, required: Source type for the trigger (e.g., jira, slack, linear, hackerone)

## Response `200`

Successful response

- object: Response containing webhook configuration fields for external service setup
  - `success` boolean, required: Whether the webhook fields were generated successfully
  - `data` object, required: Webhook configuration data
    - `triggerId` string, uuid, required: ID to save the trigger under; the webhook URL ends with it
    - `secret` string, required: Generated secret for webhook authentication
    - `webhookUrl` string, required: Generated webhook URL for external services to call
    - `additionalFields` union, required: Additional configuration fields specific to the trigger source type
      - object
        - `type` 'jira', required
        - `jiraUrl` string, required: URL to Jira webhook configuration page
      - object
        - `type` 'jira-automation', required
        - `authHeader` string, required: Header name for authentication (X-Webhook-Auth)
        - `instructions` string, required: Instructions for Jira Automation Send web request setup
      - object
        - `type` 'slack', required
      - object
        - `type` 'linear', required
        - `workspaceName` string, required: Name of the Linear workspace
      - object
        - `type` 'webhook', required
        - `authHeader` string, required: Header name for authentication (X-Webhook-Auth)
        - `instructions` string, required: Simple instructions for webhook setup
      - object
        - `type` 'hackerone', required
        - `signatureHeader` string, required: Header HackerOne uses to sign deliveries (X-H1-Signature)
        - `instructions` string, required: Instructions for HackerOne webhook setup
      - object
        - `type` 'bugcrowd', required
        - `signatureHeader` string, required: Header Bugcrowd uses to sign deliveries (X-Bugcrowd-Digest)
        - `instructions` string, required: Instructions for configuring an Outgoing Webhook in Bugcrowd
      - object
        - `type` 'zscaler', required
        - `authHeader` string, required: Header carrying the token in Zscaler deliveries (X-Cotool-Webhook-Token)
        - `instructions` string, required: Instructions for pointing a Zscaler Cloud NSS feed or alert webhook at this trigger
      - object
        - `type` 'darktrace', required
        - `basicUsername` string, required: HTTP Basic authentication username (the trigger ID)
        - `instructions` string, required: Instructions for configuring the Darktrace HTTPS module
      - object
        - `type` 'seon', required
        - `signatureHeader` string, required: Header SEON uses to sign deliveries (SEON-Signature)
        - `instructions` string, required: Instructions for registering a webhook in SEON

## Other responses

- `400`: Bad request — input validation failed or the request was malformed
- `401`: Unauthorized — missing or invalid API key / session
- `403`: Forbidden — the authenticated user lacks the required permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/cotool/apis/cotool-api.md) - [All operations](https://skmtc.dev/cotool/apis/cotool-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cotool/apis/cotool-api/revisions/f5abe0add203?raw)