---
title: "Get webhook signing secret"
method: GET
path: "/v1/account/webhook/secret"
tags: ["stream-alerts"]
---

# Get webhook signing secret

`GET /v1/account/webhook/secret`

Returns the HMAC-SHA256 secret for verifying webhook signatures. Auth required.

## Headers

- `authorization` string, nullable — Bearer JWT issued by Grove that identifies the account.

## Response `200`

Webhook secret

- WebhookSecretResponse — Response model for GET /v1/account/webhook/secret.
  - `secret` string, required — HMAC-SHA256 signing secret for webhook payloads

## Other responses

- `404` — No webhook configured
- `422` — Validation Error

---

[API](https://skmtc.net/grove/apis/grove-api.md) · [All operations](https://skmtc.net/grove/apis/grove-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/grove/grove-api/versions/f286b48a8105/schema)