---
title: "Get a webhook by ID"
method: GET
path: "/api/v2/webhook/{id}"
tags: ["webhook"]
---

# Get a webhook by ID

`GET /api/v2/webhook/{id}`

## Request

- Base URL: `https://central.zerotier.com`
- URL: `https://central.zerotier.com/api/v2/webhook/{id}`
- Auth: HTTP bearer

## Path parameters

- `id` string, required

## Response `200`

Webhook details

- WebhookResponse
  - `id` string, required
  - `orgId` string, required
  - `description` string
  - `url` string, uri, required: The HTTPS endpoint URL that will receive webhook events. Must be a fully-qualified domain name (FQDN) — raw IP addresses are not allowed. The domain must not resolve to private or internal IP ranges (RFC1918, loopback, link-local, etc.).
  - `eventList` string[], required: Event types that trigger this webhook
  - `secrets` WebhookSecret[], required: Active secrets for this webhook. Normally contains one entry (the primary). During a rotation overlap window there will be two: the new primary (expiryAt null) and the previous primary (expiryAt set).
    - `id` string, required
    - `webhookId` string, required
    - `value` string, required: The HMAC-SHA256 signing secret value
    - `createdAt` string, date-time, required
    - `lastModified` string, date-time, required
    - `expiryAt` string, date-time, nullable: When set, the secret is in a grace/overlap window and will stop being valid after this time. Null means this is the active primary secret.
  - `createdAt` string, date-time, required
  - `lastModified` string, date-time, required

## Other responses

- `401`: Missing or invalid authentication token
- `403`: Insufficient permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api.md) - [All operations](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/revisions/b2e7468ad104?raw)