---
title: "List webhook subscriptions"
method: GET
path: "/webhooks"
tags: ["Webhooks"]
---

# List webhook subscriptions

`GET /webhooks`

## Request

- Base URL: `https://joinways.app/api/v1`
- URL: `https://joinways.app/api/v1/webhooks`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://joinways.app/oauth/authorize`, token URL `https://joinways.app/api/oauth/token`, scopes: `mcp.read`)

The workspace's outbound webhook subscriptions, newest first. The signing secret is never returned after creation; without `integrations.manage`, `target_url` is reduced to its origin (`https://hooks.example.com/…`). Not paginated. **Role permission:** none (any member).

## Response `200`

Webhook subscriptions.

- object
  - `data` WebhookSubscription[], required
    - `id` string, uuid
    - `target_url` string: The endpoint; only its origin (`https://host/…`) without `integrations.manage`.
    - `event_types` WebhookEventType[]
    - `source` 'zapier' | 'custom'
    - `disabled_at` string, date-time, nullable: Set after 10 failed deliveries in a row.
    - `disabled_reason` string, nullable
    - `last_delivery_at` string, date-time, nullable
    - `created_at` string, date-time

## Other responses

- `401`: Missing, invalid, expired or revoked bearer token (`unauthorized`).
- `429`: Too many requests (`rate_limited`). `details.reason`: `per-ip`, `per-account-minute`, `per-account-day`, or `email_rate_limited` (email budget). Always carries `Retry-After`: wait that many seconds.

---

[API](https://skmtc.dev/joinways/apis/joinways-public-api.md) · [All operations](https://skmtc.dev/joinways/apis/joinways-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/joinways/apis/joinways-public-api/revisions/39e84309953e?raw)