---
title: "Get Sink Secret"
method: GET
path: "/api/v1/stream/{stream_id}/sink/{sink_id}/secret"
tags: ["Sink"]
---

# Get Sink Secret

`GET /api/v1/stream/{stream_id}/sink/{sink_id}/secret`

## Request

- Base URL: `https://api.eu.svix.com`
- URL: `https://api.eu.svix.com/api/v1/stream/{stream_id}/sink/{sink_id}/secret`
- Auth: HTTP bearer

Get the sink's signing secret (only supported for http sinks).

This is used to verify the authenticity of the delivery.

For more information please refer to [the consuming webhooks docs](https://docs.svix.com/consuming-webhooks/).

## Path parameters

- `stream_id` string, required: The Stream's ID or UID.
- `sink_id` string, required: The StreamSink's ID or UID.

## Response `200`

- SinkSecretOut
  - `key` string, nullable: The endpoint's verification secret. Format: `base64` encoded random bytes optionally prefixed with `whsec_`. It is recommended to not set this and let the server generate the secret.

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests

## Changes

- **2026-10-19** `cca56e67e5a4`: 1 info
  - added the required property `code` to the response with the `422` status

[Operation history](https://skmtc.dev/svix/apis/svix-api/changes/api/v1/stream/:stream_id/sink/:sink_id/secret/get.md)

---

[API](https://skmtc.dev/svix/apis/svix-api.md) - [All operations](https://skmtc.dev/svix/apis/svix-api/llms.txt) - [OpenAPI document](https://skmtc.dev/svix/apis/svix-api/revisions/21bb0f86a732?raw)