---
title: "List webhook endpoints"
method: GET
path: "/webhooks"
tags: ["Webhooks"]
---

# List webhook endpoints

`GET /webhooks`

Lists your webhook endpoints: those in the API key's derived scope, plus any league-scoped endpoints you own. Secret material is never returned. Requires the webhooks.manage permission.

## Response `200`

The caller's webhook endpoints.

- WebhookListResponse — List of the caller's webhook endpoints.
  - `webhooks` WebhookEndpoint[], required
    - `id` string, required — Webhook endpoint id.
    - `scopeType` 'game' | 'league' | 'org' | 'team' | 'user', required — The single scope dimension an endpoint is bound to.
    - `scopeId` string, required — Stringified bound scope id.
    - `url` string, required — Delivery URL.
    - `secretPrefix` string, required — First 8 chars of the current signing secret (display only).
    - `events` string[], required — Subscribed event tokens.
    - `isActive` boolean, required — Whether the endpoint receives deliveries.
    - `label` string, nullable, required — Human label, or null.
    - `failureCount` integer, required — Consecutive dead-lettered deliveries (auto-disables at 50).
    - `lastDeliveredAt` number, nullable, required — Epoch ms of the last successful delivery, or null.
    - `lastFailedAt` number, nullable, required — Epoch ms of the last failed delivery, or null.
    - `createdAt` number, required — Creation epoch ms.
    - `updatedAt` number, required — Last update epoch ms.
  - `count` integer, required
  - `timestamp` string, required

## Other responses

- `400` — Bad request (invalid body, cursor, limit, or date).
- `401` — Missing or invalid API key.
- `403` — API key lacks the required permission.
- `429` — Rate limited.

---

[API](https://skmtc.net/teambattles/apis/teambattles-api.md) · [All operations](https://skmtc.net/teambattles/apis/teambattles-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/teambattles/teambattles-api/revisions/2ffe8fb53b7d/schema)