Skip to main content
GET
Shows where your webhook events go and whether a signing secret is set. That’s all it returns — if you need the secret value itself, you rotate for a new one, because no read endpoint ever gives it back. This endpoint takes no parameters — the merchant is inferred from your session.

Who can call this

Dashboard only — API keys can’t read or configure webhooks. Send your dashboard JWT (browser session) as a Bearer token, with team role merchant_admin or merchant_member plus the webhooks:view permission. See the Authentication guide.

Response

string
The configured delivery URL. An empty string means no URL is set.
boolean
Whether a webhook signing secret exists for this merchant. The secret value is never returned — rotating is the only way to obtain one.
hasSecret: true with a lost secret means one thing: call Rotate webhook secret and store the new value immediately.
The delivery signature scheme, event catalog and the IPN channel are documented in the Webhooks & IPN guide.

See also