---
title: "Retrieve the signing secret of a webhook subscription"
method: GET
path: "/api/v2/webhooks/subscriptions/{subscriptionId}/secrets"
tags: ["Subscriptions"]
---

# Retrieve the signing secret of a webhook subscription

`GET /api/v2/webhooks/subscriptions/{subscriptionId}/secrets`

> 🔑
>
> Required OAuth scope: `webhookSecrets:read`.

Retrieves the details of the signing secret associated with the provided webhook subscription ID.

## Path parameters

- `subscriptionId` string, ObjectId, required

## Headers

- `360-api-version` 'v2.0', required

## Response `200`

Returns the value of the current signing secret of the webhook subscription.

- SigningSecretDTO
  - `secret` string, required — The signing secret of the webhook subscription. You can use this secret to verify the authenticity of the received events.

## Other responses

- `401` — The given access token is either missing, invalid, has expired, or has been revoked.
- `403` — The given access token does not have the required OAuth scope to execute the request.
- `404` — The given `subscriptionId` does not correspond to any existing subscription.
- `429` — The client has sent too many requests in a short amount of time.

---

[API](https://skmtc.net/360learning/apis/webhook-api.md) · [All operations](https://skmtc.net/360learning/apis/webhook-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/360learning/webhook-api/versions/18374878903d/schema)