---
title: "List webhook endpoints"
method: GET
path: "/webhooks"
tags: ["Webhooks"]
---

# List webhook endpoints

`GET /webhooks`

## Request

- Base URL: `https://gtmswag.com/api/v1`
- URL: `https://gtmswag.com/api/v1/webhooks`
- Auth: HTTP bearer

The workspace's endpoints and the event types each receives. Owner or admin keys only (others get 403 TEAM_MANAGER_REQUIRED). Secrets are never returned again; see the top-level `webhooks` for payloads and signature checks.

## Response `200`

Success: `{"data": [Webhook]}`.

- WebhookListResponse: The success body: `{"data": [Webhook]}`.
  - `data` Webhook[], required
    - `id` string, required
    - `url` string, required
    - `events` string[], required
    - `createdAt` string, required

## Other responses

- `401`: Not authenticated: `AUTH_REQUIRED`. no credentials, or an OAuth token on a route that only takes workspace keys; the key is malformed, unknown or revoked.
- `403`: Forbidden: `TEAM_MANAGER_REQUIRED`. Each example says when.
- `429`: Too many requests: `RATE_LIMIT`. more than 240 requests in the current minute for this workspace (REST and MCP share the limit); wait `retryAfterMs`.
- `default`: Any other refusal or failure, such as 403 CSRF (a cross-origin `Origin` header), 403 HTTPS_REQUIRED or 500 INTERNAL_ERROR, with what to do next.

---

[API](https://skmtc.dev/gtmswag/apis/gtm-swag-api.md) · [All operations](https://skmtc.dev/gtmswag/apis/gtm-swag-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gtmswag/apis/gtm-swag-api/revisions/9ff86fa99afe?raw)