---
title: "Get all OAuth credentials"
method: GET
path: "/webhooks_settings/oauth"
tags: ["Webhooks V2"]
---

# Get all OAuth credentials

`GET /webhooks_settings/oauth`

## Request

- Base URL: `https://api.fireblocks.io/v1`
- URL: `https://api.fireblocks.io/v1/webhooks_settings/oauth`
- Auth: none declared
- TypeScript: <https://skmtc.dev/fireblocks/apis/fireblocks-api/docs/webhooks_settings/oauth/get.ts> (a function with typed inputs; its response is checked against the schema)

Lists every OAuth credential set for the workspace. Client secrets are never returned.

## Response `200`

The workspace's OAuth credentials

- WebhookOauthCredentials[]: Every OAuth credential set belonging to the workspace. Client secrets are never returned.
  - `id` string, uuid, required: The id of the OAuth credentials. Pass this as a webhook's `webhookOauthId` to attach them.
  - `name` string, required: The label given to this credential set.
  - `clientId` string, required: OAuth client ID used to authenticate with the token endpoint.
  - `url` string, required: Token endpoint URL.
  - `authMethod` string, required: How the client credentials are presented to the token endpoint: `client_secret_basic`, `client_secret_post` or `client_secret_jwt`. Credentials created without this field report `client_secret_basic`, which is what they use.
  - `customJwtClaims` string[]: Names of the additional claims placed in the JWT assertion. Claim values are write-only and are never returned. Absent when no custom claims are configured.
  - `customBodyParams` string[]: Names of the additional parameters added to the token request body. Parameter values are write-only and are never returned. Absent when no custom parameters are configured.
  - `customHeaders` string[]: Names of the additional HTTP headers added to **the token request sent to the authorization server** — not to the webhook delivery, which has its own separate `customHeaders`. Header values are write-only and are never returned. Absent when no custom headers are configured.
  - `webhookMtlsId` string, uuid: The id of the mTLS configuration presented to the token endpoint. Absent when the token request does not use mTLS. Read the certificate from `/v1/webhooks_settings/mtls/{id}`.
  - `createdAt` integer, required: The date and time the OAuth credentials were created, in milliseconds.
  - `updatedAt` integer, required: The date and time the OAuth credentials were last updated, in milliseconds.

## Other responses

- `default`: Error Response

---

[API](https://skmtc.dev/fireblocks/apis/fireblocks-api.md) - [All operations](https://skmtc.dev/fireblocks/apis/fireblocks-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fireblocks/apis/fireblocks-api/revisions/4eba9965659a?raw)