---
title: "Get webhook signing secret status"
method: GET
path: "/v1/webhooks/signing-secret"
tags: ["Agents"]
---

# Get webhook signing secret status

`GET /v1/webhooks/signing-secret`

## Request

- Base URL: `https://api.pyai.com`
- URL: `https://api.pyai.com/v1/webhooks/signing-secret`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-api-key`

Whether your org has a per-org webhook signing secret used to verify post-call extraction (and transcription-job) webhooks. Returns status only, never the secret value. Requires the `omni:session` scope.

## Response `200`

Secret status

- object
  - `object` string
  - `configured` boolean: True once a per-org secret is minted; otherwise PyAI signs with the platform-wide fallback.
  - `last4` string, nullable: Last 4 chars of the active secret for identification; null when not configured.

## Other responses

- `401`: Missing or invalid API key (`code: unauthorized`)

---

[API](https://skmtc.dev/pyai/apis/pyai-api.md) · [All operations](https://skmtc.dev/pyai/apis/pyai-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pyai/apis/pyai-api/revisions/271a1539185b?raw)