---
title: "List webhooks registered on a mailbox"
method: GET
path: "/v1/mailboxes/{mailbox_id}/webhooks"
tags: ["webhooks"]
---

# List webhooks registered on a mailbox

`GET /v1/mailboxes/{mailbox_id}/webhooks`

## Request

- Base URL: `https://mbag.ai/api`
- URL: `https://mbag.ai/api/v1/mailboxes/{mailbox_id}/webhooks`
- Auth: HTTP bearer

Never includes `secret` (unlike the create response).

## Path parameters

- `mailbox_id` integer, required

## Response `200`

The mailbox's webhooks, newest first.

- WebhookSummary[]
  - `created_at` string, date-time, required
  - `events` string[], required
  - `id` integer, required
  - `is_active` boolean, required
  - `mailbox_id` integer, required
  - `url` string, required

## Other responses

- `401`: Missing or invalid credential, raised by the `ApiKeyAuth` extractor (`backend/src/api_keys.rs`) before the handler runs: no `Authorization` header, a non-`Bearer` scheme, a key that doesn't hash-match any row, or a key whose status isn't `active`. A header that isn't valid UTF-8, has no scheme token, or has `Bearer` with no key value returns 400 with this same JSON shape instead of 401.
- `404`: Mailbox not found (or not owned by the caller). Plain-text body.
- `500`: Database error. Plain-text body.

---

[API](https://skmtc.dev/mailbuttons/apis/mailbuttons-agent-mail-api.md) · [All operations](https://skmtc.dev/mailbuttons/apis/mailbuttons-agent-mail-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mailbuttons/apis/mailbuttons-agent-mail-api/revisions/fe2761823978?raw)