---
title: "Get webhook secret"
method: GET
path: "/v2/organizations/webhook/secret"
tags: ["Organizations"]
---

# Get webhook secret

`GET /v2/organizations/webhook/secret`

Returns the organization webhook signing secret used to verify Sync-Signature headers on generation and batch webhooks. Sync signs the raw JSON request body as HMAC-SHA256 over `<timestamp>.<rawBody>` and sends it as `Sync-Signature: t=<unix>,v1=<hex_digest>`. Store the full `whsec_...` value securely and use `masked=true` only for display.

## Query parameters

- `masked` boolean

## Response `200`

Webhook secret

- WebhookSecretResponseDto
  - `secret` string, required

---

[API](https://skmtc.dev/sync/apis/sync-api-v2.md) · [All operations](https://skmtc.dev/sync/apis/sync-api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sync/sync-api-v2/revisions/595901a0ee97/schema)