---
title: "List webhook endpoints"
method: GET
path: "/api/v1/webhook-endpoints"
tags: ["webhooks"]
---

# List webhook endpoints

`GET /api/v1/webhook-endpoints`

## Request

- Base URL: `https://api.izap.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.izap.ai/api/v1/webhook-endpoints`
- Auth: HTTP bearer

Returns the webhook endpoints registered for the business, newest first. Signing secrets are never included — a secret is readable only in the response that creates or rotates it. The business is taken from the `business-id` header rather than the URL; the path-scoped form of this operation is deprecated.

## Headers

- `business-id` string, nullable, required: UUID of the business the request is scoped to. Required on this route; the deprecated /businesses/{business_id}/... form takes it from the path instead.

## Response `200`

Successful Response

- WebhookEndpointOut[]
  - `id` string, uuid, required
  - `label` string, required
  - `url` string, required
  - `subscribed_events` string[], required
  - `enabled` boolean, required
  - `consecutive_failures` integer, required
  - `last_error` string, nullable, required
  - `last_delivery_at` string, date-time, nullable, required
  - `created` string, date-time, required

## Other responses

- `401`: Missing or invalid credentials.
- `403`: The credential is valid but not authorized for this action.
- `404`: The resource, or the business named in the request, does not exist.
- `422`: Validation Error
- `default`: Unexpected error.

---

[API](https://skmtc.dev/izap/apis/izap-api.md) · [All operations](https://skmtc.dev/izap/apis/izap-api/llms.txt) · [OpenAPI document](https://skmtc.dev/izap/apis/izap-api/revisions/e6358c8bf5e9?raw)