---
title: "List webhook subscriptions"
method: GET
path: "/api/webhooksubscriptions"
tags: ["Webhook subscriptions"]
---

# List webhook subscriptions

`GET /api/webhooksubscriptions`

## Request

- Base URL: `https://api.doctofam.com`
- URL: `https://api.doctofam.com/api/webhooksubscriptions`
- Auth: API key in header `Authorization`

Webhook subscriptions deliver `patient.created`, `appointment.created`, `invoice.created` and `payment.created` events (and their `.updated` / `.deleted` variants) to your server as signed POST requests (`X-Doctofam-Signature: t=<timestamp>,v1=<hex HMAC-SHA256 of "timestamp.body">`). An endpoint failing 20 times in a row is disabled automatically. Subscriptions are managed with an operator access token; the `secret` is only returned once, on create.

## Response `200`

Array of webhook subscriptions (without secrets)

---

[API](https://skmtc.dev/doctofam/apis/doctofam-api.md) · [All operations](https://skmtc.dev/doctofam/apis/doctofam-api/llms.txt) · [OpenAPI document](https://skmtc.dev/doctofam/apis/doctofam-api/revisions/435b0ab34960?raw)