---
title: "List webhooks"
method: GET
path: "/webhooks"
tags: ["Webhook"]
---

# List webhooks

`GET /webhooks`

Returns a paginated list of all webhook endpoints registered for your
organization. The `secret` field is never included in list responses.
Supports cursor-based pagination via `limit` (default 10, max 100),
`startingAfter` (cursor for the next page), and `endingBefore` (cursor
for the previous page).

## Query parameters

- `limit` integer
- `startingAfter` string
- `endingBefore` string

## Response `200`

The request has succeeded.

- WebhookList
  - `object` string — Resource type discriminator.
  - `hasMore` boolean — True when more rows exist beyond this page in the direction of travel (forward by default, backward when `endingBefore` was supplied).
  - `nextCursor` string — Opaque cursor pointing at the last item in this page. Present when `data` is non-empty. Pass as `startingAfter` to fetch the next page; `hasMore=false` signals no more pages forward.
  - `previousCursor` string — Opaque cursor pointing at the first item in this page. Present when `data` is non-empty. Pass as `endingBefore` to page backward; when this yields an empty response the client is at the start of the list.
  - `data` Webhook[] — The page of results.
    - `id` string — Public TypeID, e.g. `txn_01h455vb4pex5vsknk084sn02q`; legacy UUID suffixes are accepted until non-v7 rows are retired.
    - `object` 'webhook' — Resource type discriminator. Always `"webhook"`.
    - `url` string — HTTPS endpoint that OMS delivers event payloads to.
    - `secret` string — Signing secret used to verify the `Webhook-Signature` header on incoming deliveries. Uses the `whsec_` prefix (32 cryptographically random bytes, hex-encoded). **Returned only on creation** - it cannot be retrieved afterward. Store it in your secrets manager immediately.
    - `events` string[] — Event types this endpoint subscribes to. An empty array means the endpoint receives all event types (wildcard). See the event catalog in the webhook delivery documentation for the full list of valid values.
    - `enabled` boolean — Whether OMS is actively delivering events to this endpoint. Set to `false` to pause deliveries without deleting the endpoint. OMS also sets this to `false` automatically if the endpoint returns `410 Gone`.
    - `complianceOnly` boolean, required — When true, this endpoint receives compliance-only events (e.g. underReview) that are excluded from all regular partner webhooks (AML no-tipping-off). Can only be set via the admin API.
    - `status` 'active' | 'disabled'
    - `createdAt` string, date-time — ISO 8601 UTC timestamp of when the webhook was registered.

---

[API](https://skmtc.net/polygon-technology/apis/polygon-oms-public-api.md) · [All operations](https://skmtc.net/polygon-technology/apis/polygon-oms-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/polygon-technology/polygon-oms-public-api/revisions/18fdaebf64e5/schema)