Get webhooks
Returns all webhooks configured for the integrator.
Authorizations
HMAC signature authentication for backend integrators.
Required Headers:
- X-Integrator-Key: Integrator API key (format: int_...)
- X-Signature: HMAC signature (format: sha256={hex})
- X-Timestamp: Unix timestamp in milliseconds
- Authorization: Bearer {user-api-key}
Signature Algorithm: HMAC-SHA256
Signature Format: {timestamp}.{METHOD}.{path}.{bodyHash}
- timestamp: Unix timestamp in milliseconds
- METHOD: HTTP method in UPPERCASE (GET, POST, etc.)
- path: Request path (e.g., /v1/transactions)
- bodyHash: SHA256 hex digest of request body (empty string if no body)
Timestamp Tolerance: ±5 minutes (300 seconds)
Example: For POST /v1/transactions with body {"amount":100} and timestamp 1234567890000: Payload: 1234567890000.POST./v1/transactions.{sha256(body)} Signature: sha256=abc123...
Integrator API key (format: int_...) used with HMAC authentication
Unix timestamp in milliseconds for replay attack prevention. Must be within 5 minutes of server time.
Response
List of webhooks configured for the integrator
Unique identifier for the webhook
"6a749a054c3b8fc5da595d1e"
List of event types this webhook is subscribed to
account.created, account.updated, account.deleted, payment.created, payment.updated, payment.completed, payment.refunded, verification.status.updated, capabilities.updated, onramp.created, onramp.updated, onramp.completed, achDebitReturn.created, achDebitReturn.updated, * URL to which webhook payloads are delivered
"https://api.example.com/webhooks"
Number of consecutive delivery failures
x >= 00
Whether the webhook is currently disabled
false