---
title: "List webhook endpoints"
method: GET
path: "/api/v1/webhooks/endpoints"
tags: ["webhooks"]
---

# List webhook endpoints

`GET /api/v1/webhooks/endpoints`

## Request

- Base URL: `https://api.trigger.dev`
- URL: `https://api.trigger.dev/api/v1/webhooks/endpoints`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/triggerdotdev/apis/trigger-dev-v3-rest-api/docs/api/v1/webhooks/endpoints/get.ts> (a function with typed inputs; its response is checked against the schema)

List the hosted webhook endpoints in the environment, ordered by declared id. Each endpoint includes its webhook URL and whether its signing secret is set. The secret itself is never returned.

## Query parameters

- `filter[webhook]` string

## Response `200`

Successful request

- ListWebhookEndpointsResult
  - `data` WebhookEndpointObject[], required
    - `id` string, required: The endpoint's id.
    - `declaredId` string, required: The `id` the endpoint is declared with in code (`webhooks.endpoint.define({ id })`).
    - `source` string, required: The provider source that verifies and types the endpoint's events.
    - `status` 'active' | 'inactive' | 'deleting', required: `active` accepts deliveries. `inactive` was disabled, or is no longer in the current deployment, and its URL responds with `404`.
    - `secretProvisioning` 'provider' | 'integrator' | 'either', required: Who supplies the signing secret: `provider` issues it (store it with the set secret endpoint), `integrator` means you choose it (generate one), and `either` accepts both.
    - `secretSet` boolean, required: Whether a signing secret or public key is set. Every delivery is rejected until it is.
    - `tenantId` string, nullable, required: Reserved for dynamic endpoints. `null` for a declared endpoint.
    - `externalRef` string, nullable, required: Reserved for dynamic endpoints. `null` for a declared endpoint.
    - `url` string, required: The webhook URL to register with the provider.
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required

## Other responses

- `401`: Unauthorized request

## Changes

- **2026-10-15** `f44b1ec886c8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/triggerdotdev/apis/trigger-dev-v3-rest-api/changes/api/v1/webhooks/endpoints/get.md)

---

[API](https://skmtc.dev/triggerdotdev/apis/trigger-dev-v3-rest-api.md) - [All operations](https://skmtc.dev/triggerdotdev/apis/trigger-dev-v3-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/triggerdotdev/apis/trigger-dev-v3-rest-api/revisions/441161111493?raw)