---
title: "Your subscriptions"
method: GET
path: "/api/v1/webhooks"
tags: ["Webhooks"]
---

# Your subscriptions

`GET /api/v1/webhooks`

## Request

- Base URL: `https://mailcheer.com`
- URL: `https://mailcheer.com/api/v1/webhooks`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`

Permission required: `webhooks:read`. Secrets do not appear in the list — read the subscription itself to get one.

## Response `200`

The workspace's subscriptions.

- object: The envelope of every list. To walk through it: as long as `has_more` is `true`, call the same address again with `?cursor=<next_cursor>`. The order is stable; a page returns at most `limit` items (50 by default, 100 at most).
  - `object` 'list'
  - `data` object[]
    - `object` 'webhook'
    - `id` string
    - `name` string: The name you give it.
    - `url` string, uri
    - `events` string[]
    - `enabled` boolean
    - `secret` string: The signing secret (`whsec_…`). Returned on creation, when reading one specific subscription, and after a secret rotation — **never in the list**, which we log in full without a second thought.
    - `created_at` string, date-time
    - `updated_at` string, date-time
  - `has_more` boolean: One more page after this one.
  - `next_cursor` string, nullable: To pass back as `?cursor=` for the next page. `null` on the last page.

## Other responses

- `401`: Key missing, unknown or revoked.
- `403`: The key does not have the requested permission, or the workspace cannot send: `sending_blocked` (suspended, blocked or banned — nothing goes out, through any channel), `commitment_required` (the anti-spam commitment is not accepted), `reputation_blocked` (too many bounces or complaints).

---

[API](https://skmtc.dev/mailcheer/apis/mailcheer-api.md) · [All operations](https://skmtc.dev/mailcheer/apis/mailcheer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mailcheer/apis/mailcheer-api/revisions/ba64b7ef2170?raw)