---
title: "List endpoints"
method: GET
path: "/v1/webhooks"
tags: ["Webhooks"]
---

# List endpoints

`GET /v1/webhooks`

## Request

- Base URL: `https://api.volanea.com`
- URL: `https://api.volanea.com/v1/webhooks`
- Auth: HTTP bearer

Every endpoint registered for the project, with the event patterns each subscribes to and whether it is enabled.

**This response includes each endpoint's `whsec_…` signing secret**, not just the create call. That makes rotation-free recovery easy — you can always read the secret back — but it also makes this response a credential, so treat it like one and never proxy it to a browser.

## Response `200`

All endpoints.

- object
  - `data` WebhookEndpoint[], required
    - `webhookEndpointId` string, required
    - `projectId` string
    - `url` string, uri, required
    - `description` string, nullable
    - `secret` string, required: `whsec_…` — used to HMAC-SHA256-sign every delivery (`X-Volanea-Signature: t=<ms>,v1=<hex>` over `<t>.<body>`).
    - `events` string[], nullable: Event name patterns, e.g. `["email.*", "contact.created"]`. Empty or null = all events.
    - `enabled` boolean, required
    - `createdAt` string, date-time, required

## Other responses

- `401`: Missing or invalid API key.

---

[API](https://skmtc.dev/volanea/apis/volanea-api.md) · [All operations](https://skmtc.dev/volanea/apis/volanea-api/llms.txt) · [OpenAPI document](https://skmtc.dev/volanea/apis/volanea-api/revisions/9e187ae84fda?raw)