Hanzo
OpenapiWebhook

Returns every webhook endpoint the caller's org has registered, newest first,…

Returns every webhook endpoint the caller's org has registered, newest first, each with its 7-day delivery and failure counts.

GET /v1/webhook

Addresshttps://api.hanzo.ai/v1/webhook
MethodGET
Operationget_webhook
AuthAuthorization: Bearer $HANZO_API_KEY

Returns every webhook endpoint the caller's org has registered, newest first, each with its 7-day delivery and failure counts. Signing secrets are redacted here — a secret leaves the server only on create and on rotate. The listing is physically org-scoped, so another tenant's endpoints are not reachable from this route at all.

Request

GET /v1/webhook takes no parameters and no body — the credential is the whole request.

Response

StatusBodyMeaning
200endpointListok

200 body — 12 fields.

FieldInTypeAlwaysDescription
databodyEndpoint[]Data is the org's endpoints, newest first, each with its signing secret REDACTED — the secret leaves the server only on create and on rotate.
data[].createdbodystringCreatedAt is when the endpoint was registered, RFC3339 in UTC — stored in that spelling because it sorts as a string.
data[].deliveries7dbodyintegerDeliveries7d is how many deliveries SETTLED in the trailing 7 days — the attempts that ended ok or failed, so a delivery still retrying is in neither counter…
data[].descriptionbodystringDescription is the operator's own label for the endpoint.
data[].eventsbodystring[]Events are the subject patterns this endpoint subscribes to ("commerce.order.>").
data[].failures7dbodyintegerFailures7d is how many of those settled as failed — the subscriber never accepted it and no further attempt will be made.
data[].idbodystringID is the endpoint's handle, server-minted and stable for its life.
data[].orgbodystringOrg is the tenant that owns the endpoint, taken from the validated principal rather than from any request field.
data[].secretbodystringSecret is the HMAC-SHA256 signing key a subscriber recomputes the signature with.
data[].statusbodystringStatus is "active" or "disabled" — nothing else is accepted.
data[].updatedbodystringUpdatedAt is when its url, events, status or description last changed.
data[].urlbodystringURL is where the POST goes.

Failure carries the platform error shape — see Errors.

Examples

hanzo webhooks list

Webhook API · All Hanzo APIs · Interactive reference

How is this guide?

On this page