---
title: "List your organization's webhooks (auth required; never includes signing secrets)"
method: GET
path: "/api/rightos/webhooks"
tags: ["webhooks"]
---

# List your organization's webhooks (auth required; never includes signing secrets)

`GET /api/rightos/webhooks`

## Request

- Base URL: `https://rightos.i-s3.com`
- URL: `https://rightos.i-s3.com/api/rightos/webhooks`
- Auth: one of:
  - `apiKey` (a scheme the document does not define)
  - `bearer` (a scheme the document does not define)

## Response `200`

Webhooks

- object
  - `webhooks` Webhook[]
    - `id` string, required
    - `organizationId` string, required
    - `url` string, uri, required
    - `events` WebhookEventType[], required
    - `createdAt` string, date-time, required
    - `lastDelivery` WebhookDeliveryResult: Most recent webhook delivery attempt.
      - `at` string, date-time, required
      - `event` 'token.verified' | 'token.used' | 'token.cancelled' | 'token.transferred' | 'queue.approaching', required: Outbound webhook event types. queue.approaching fires only when the location policy sets approachingThreshold (ADR-0029).
      - `ok` boolean, required
      - `status` integer: HTTP status (absent on connection failure or timeout)
      - `error` string: Short error description (no secrets)
    - `deliveredCount` integer
    - `failedCount` integer

## Other responses

- `401`: Missing or invalid API key

---

[API](https://skmtc.dev/i-s3/apis/rightos-right-api.md) · [All operations](https://skmtc.dev/i-s3/apis/rightos-right-api/llms.txt) · [OpenAPI document](https://skmtc.dev/i-s3/apis/rightos-right-api/revisions/10020536e345?raw)