List webhook endpoints (admin)
Admin variant of GET /v1/webhooks/endpoints. Lists endpoints scoped to the caller owner level (tenant or platform). Signing secrets are never included.
Authorization
bearer In: header
Query Parameters
Selected merchant context
Response Body
application/json
curl -X GET "https://<api-host>/v1/admin/webhook-endpoints"{
"data": [
{
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"ownerType": "merchant",
"ownerId": "string",
"tenantId": "f97df110-f4de-492e-8849-4a6af68026b0",
"livemode": true,
"url": "http://example.com",
"description": "string",
"events": [
"string"
],
"status": "active",
"maxAttempts": 1,
"facadeCode": "native",
"createdAt": "string",
"updatedAt": "string",
"deletedAt": null
}
],
"pagination": {
"nextCursor": "string",
"prevCursor": "string",
"hasMore": true,
"totalCount": 0
}
}Get webhook endpoint (admin)
Admin variant of GET /v1/webhooks/endpoints/:id. Returns a single endpoint by ID. The signing secret is never returned on read.
Rotate webhook endpoint signing secret (admin)
Admin variant of POST /v1/webhooks/endpoints/:id/rotate-secret. Generates a new signing secret. The secret and exact deadline are returned in this non-cacheable response; reusing the same Idempotency-Key safely replays them after response loss. Store the secret securely and install it during the bounded grace period. Native and strp-compatible deliveries accept both secrets during grace; adn- and chkt-compatible deliveries keep using the previous secret until the deadline.