Skip to main content
Use this endpoint to retrieve the webhook configuration currently registered for your tenant. The response includes the configured URL and a masked representation of the signing secret. Because the secret is never returned in plaintext after initial registration, use this endpoint to confirm that a webhook URL is set and to inspect its URL — not to recover the secret. If you need to rotate the secret, update the webhook using the PUT endpoint.

​
Endpoint

​
Authorization

Requires an API key with WEBHOOK_MANAGE scope.
The webhook signing secret is always masked in this response — you get the first 8 hex characters followed by ... (for example, a1b2c3d4...). If you have lost the secret, use Update Webhook to register a new URL — a fresh secret will be issued and shown once in that response.

​
Request Example

​
Response

​
string
required
The HTTPS URL that Idem will POST event payloads to.
​
string
required
The first 8 hex characters of the signing secret, followed by .... The raw value is never returned by this endpoint.

​
Response Example

​
Error Codes