---
title: "List webhooks"
method: GET
path: "/v1/webhooks"
tags: ["Webhooks"]
---

# List webhooks

`GET /v1/webhooks`

## Request

- Base URL: `https://hcti.io`
- URL: `https://hcti.io/v1/webhooks`
- Auth: HTTP basic

Returns webhooks in descending creation order, including disabled webhooks. Pass pagination.next_page_start as page_start to continue; null indicates the final page. Secret parameter values and signing secrets are never returned.

**Rate limit:** 100 requests per minute per organization, shared across all operations in the `webhook:read` group and all API keys belonging to that organization.

## Query parameters

- `count` union
  - integer
  - string, int32
- `page_start` string

## Response `200`

OK

- PaginatedListBaseOfWebhookAndstring
  - `data` Webhook[]
    - `id` string, required: Webhook ID.
    - `name` string, required: Display name for the webhook.
    - `enabled` boolean: Whether the webhook is enabled. Disabled webhooks receive no deliveries.
    - `url` string, required: HTTPS endpoint that receives deliveries, without query parameters.
    - `events` WebhookEventType[], required: Event types delivered to this webhook.
    - `parameters` WebhookParameter[], required: Headers and query parameters added to every delivery. Secret values are omitted.
      - `location` 'header' | 'query_parameter', required: Where a webhook parameter is sent on each delivery.
      - `key` string, required: Header or query parameter name.
      - `secret` boolean: Whether the value is secret. Secret values are stored encrypted and never returned.
      - `value` string, nullable: The parameter value, or null for secret parameters.
    - `signing_enabled` boolean: Whether deliveries are signed with this webhook's signing secret.
    - `signing_secret` string, nullable: Signing secret for verifying deliveries. Returned only in the REST API create response, even when signing is disabled. Store it securely; updates, reads, lists, and MCP responses omit this field.
    - `config_version` union: Version of the delivery settings (URL, parameters, and signing). It increases when any of them change, and each delivery attempt records the version it used.
      - integer
      - string, int32
    - `created_at` string, date-time: UTC timestamp when the webhook was created.
    - `updated_at` string, date-time: UTC timestamp when the webhook was last updated.
    - `test_event_id` string, nullable: Event ID of the webhook_test delivery this create or update queued, matching the event_id the endpoint receives. Null when no test was queued, and always null outside create and update responses.
  - `pagination` PaginationInfoOfstring
    - `next_page_start` string, nullable, required

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests

## Changes

- **2026-11-03** `100550373ae1`: 1 info
  - added the optional property `data/items/signing_secret` to the response with the `200` status
- **2026-10-30** `146fbf859b2d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/htmlcsstoimage/apis/html-css-to-image-api/changes/v1/webhooks/get.md)

---

[API](https://skmtc.dev/htmlcsstoimage/apis/html-css-to-image-api.md) - [All operations](https://skmtc.dev/htmlcsstoimage/apis/html-css-to-image-api/llms.txt) - [OpenAPI document](https://skmtc.dev/htmlcsstoimage/apis/html-css-to-image-api/revisions/100550373ae1?raw)