---
title: "GET /account/{accountId}/authorization-webhook"
method: GET
path: "/account/{accountId}/authorization-webhook"
---

# GET /account/{accountId}/authorization-webhook

`GET /account/{accountId}/authorization-webhook`

Retrieve the authorization webhook configuration for an account.
This webhook is called during card authorization requests to allow external systems
to approve or reject transactions in real-time.

## Response `200`

OK

- AuthorizationWebhook
  - `webhookUrl` string, required — The URL where authorization webhook events will be sent
  - `signingSecret` string, required — Secret used for signing webhook payloads
  - `status` 'active' | 'inactive', required — Current status of the webhook
  - `timeoutDurationMs` integer, required — The timeout duration in milliseconds for webhook requests
  - `config` object, required — Configuration specific to the authorization webhook
    - `fallbackBehavior` 'default' | 'reject', required — The fallback behavior will be used if the webhook fails to send a response in time, or sends an invalid response. Default behavior will continue to run the balance check in the auth loop. Reject behavior will reject the transaction.
  - `createdAt` string, date-time, required — When the webhook was created
  - `updatedAt` string, date-time, required — When the webhook was last updated

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `429` — TooManyRequests
- `500` — Internal Error

---

[API](https://skmtc.net/slashfi/apis/slash-public-api.md) · [All operations](https://skmtc.net/slashfi/apis/slash-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/slashfi/slash-public-api/versions/773c90f079c5/schema)