---
title: "Get Operational Webhook Endpoint Secret"
method: GET
path: "/api/v1/operational-webhook/endpoint/{endpoint_id}/secret"
tags: ["Webhook Endpoint"]
---

# Get Operational Webhook Endpoint Secret

`GET /api/v1/operational-webhook/endpoint/{endpoint_id}/secret`

## Request

- Base URL: `https://api.eu.svix.com`
- URL: `https://api.eu.svix.com/api/v1/operational-webhook/endpoint/{endpoint_id}/secret`
- Auth: HTTP bearer

Get an operational webhook endpoint's signing secret.

This is used to verify the authenticity of the webhook.
For more information please refer to [the consuming webhooks docs](https://docs.svix.com/consuming-webhooks/).

## Path parameters

- `endpoint_id` string, required: The Endpoint's ID or UID.

## Response `200`

- OperationalWebhookEndpointSecretOut
  - `key` string, required: The endpoint's verification secret. Format: `base64` encoded random bytes optionally prefixed with `whsec_`. It is recommended to not set this and let the server generate the secret.

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests

## Changes

- **2026-10-19** `cca56e67e5a4`: 1 info
  - added the required property `code` to the response with the `422` status

[Operation history](https://skmtc.dev/svix/apis/svix-api/changes/api/v1/operational-webhook/endpoint/:endpoint_id/secret/get.md)

---

[API](https://skmtc.dev/svix/apis/svix-api.md) - [All operations](https://skmtc.dev/svix/apis/svix-api/llms.txt) - [OpenAPI document](https://skmtc.dev/svix/apis/svix-api/revisions/21bb0f86a732?raw)