---
title: "List your webhooks"
method: GET
path: "/webhooks"
tags: ["Webhooks"]
---

# List your webhooks

`GET /webhooks`

## Request

- Base URL: `https://madeonsol.com/api/v1`
- URL: `https://madeonsol.com/api/v1/webhooks`
- Auth: HTTP bearer

List the webhooks you've registered — each with its delivery URL, subscribed events, filters, and enabled state (the signing secret is never returned). PRO/ULTRA only.

## Response `200`

OK

- object
  - `webhooks` object[]
    - `id` integer
    - `url` string, uri
    - `events` string[]: dev:activity (live since 2026-10-05): developer dev_sell / dev_buy / dev_token_transfer_out / dev_token_transfer_in, projected per tier at delivery (PRO: the developer's own events, raw facts, no identity keys; ULTRA+: identity fields and linked-wallet events from proven links only). Dedupe on data.id. Solana transfers combine the legacy bounded wallet watch with the broad SPL Token / Token-2022 candidate source for attributed creators; transfer_watch_coverage describes the legacy watch only, while broad-source state/gaps are reported separately. Recovered broad-source rows can appear in REST history but are not retroactively re-sent as WS/webhook alerts. rhc:dev_activity: Robinhood Chain developer dev_buy / dev_sell ONLY (the token's recorded deployer trading it; developer token transfers are never delivered), PRO+, same projection and dedupe; payload fields as dev:activity with chain=robinhood, signature=tx hash, slot=block number. Live since 2026-10-05.
    - `filters` WebhookFilters: Optional per-event delivery filters on a webhook. wallet_tracker:event (since 2026-09-25): only min_sol, action and conditions on its own fields apply, after the subscriber check; on a webhook subscribed to wallet_tracker:event alone any other named filter is a 400.
      - `min_sol` number: Minimum sol_amount (kol:trade, wallet_tracker:event)
      - `action` 'buy' | 'sell': kol:trade, wallet_tracker:event (transfers have no action and are excluded)
      - `kol_name` string
      - `deployer_tier` string[]
      - `min_kols` integer
      - `kinds` string[]: token:surge / token:revival only
      - `tiers` string[]: token:surge / token:revival only
      - `launchpads` string[]: token:surge / token:revival only
      - `exclude_flags` string[]: token:surge / token:revival only
      - `min_mc_usd` number
      - `max_mc_usd` number
      - `types` string[]: dev:activity and rhc:dev_activity: event types to deliver. rhc:dev_activity carries dev_buy / dev_sell only (developer token transfers are never delivered on Robinhood Chain in v1), so the transfer types never match there.
      - `token_mints` string[]: dev:activity only: mints
      - `addresses` string[]: rhc:dev_activity only: 0x token addresses (case-insensitive)
      - `deployers` string[]: dev:activity (base58) and rhc:dev_activity (0x, case-insensitive): matches deployer_wallet or actor_wallet
      - `conditions` object[]: ULTRA+ (2026-09-08). Custom { field, op, value } triples ANDed together and evaluated against the raw event payload, on top of the named filters. `field` must be a documented payload field of one of the webhook's subscribed event types (one level of dot-path allowed, e.g. `triggering_trade.sol_amount`); anything else is a 400. Number fields take eq/neq/gt/gte/lt/lte/in, strings eq/neq/in/contains, booleans eq/neq. On PRO the request is a 403 tier_required.
        - `field` string, required
        - `op` 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'contains', required
        - `value` union, required: number | string | boolean, or a non-empty array (≤20) for `in`.
          - number
          - string
          - boolean
          - union[]
            - union
              - …
    - `is_active` boolean
    - `created_at` string, date-time
    - `last_delivered_at` string, date-time, nullable
    - `consecutive_failures` integer
    - `delivery_summary` object
      - `total_24h` integer
      - `success_24h` integer
      - `failed_24h` integer
      - `success_rate` number: Percent; 100 when total_24h is 0

## Other responses

- `401`: Missing or invalid API key, or an expired free-tier key. Authentication-stage error: no `X-RateLimit-*` headers, no `_rid`.
- `403`: Forbidden. One of: the key's tier is below this endpoint's or parameter's gate (`tier_required` with an `upgrade` block); the public demo key used outside its allow-list (`demo_key_endpoint_not_allowed`); an invalid or revoked key; an origin-restricted key called from a disallowed origin (`code` `origin_not_allowed` / `origin_required`). `X-RateLimit-*` headers are present only on `tier_required`.
- `429`: Too many requests. Every 429 carries `Retry-After`. A quota 429 (`rate_limit_exceeded`, with `X-RateLimit-*`), a heavy-query concurrency 429 (`error_kind` `concurrency`/`capacity`), or the per-IP authentication-failure block (30 failed auths/min; plain `error` + `retry_after_seconds`, no `X-RateLimit-*`).
- `500`: Unexpected server error from the route (`Internal server error`, with `_rid`). Safe to retry with backoff. A failed API-key lookup is a 503 `auth_backend_unavailable`, never a 500.
- `503`: The API-key or subscription lookup could not be answered (authentication stage). Retryable and not your fault: it is never counted as a failed authentication. Honour `Retry-After`; no `X-RateLimit-*`, no `_rid`.

---

[API](https://skmtc.dev/madeonsol/apis/madeonsol-api.md) · [All operations](https://skmtc.dev/madeonsol/apis/madeonsol-api/llms.txt) · [OpenAPI document](https://skmtc.dev/madeonsol/apis/madeonsol-api/revisions/d9531a28d83b?raw)