List webhook endpoints

GET/api/v1/webhooks

scope webhooks:manage

Every endpoint on the account, newest first. Not paginated — an account has at most 10. The signing secret is never returned; only its last four characters.

Request

curl "https://your-crm.example.com/api/v1/webhooks" \
  -H "Authorization: Bearer $RAABTA_API_KEY"

Response · 200 OK

{
  "data": [
    {
      "id": "3a4b5c6d-7e8f-4a9b-8c0d-1e2f3a4b5c6d",
      "url": "https://example.com/hooks/raabta",
      "description": "Sync contacts and deals into our warehouse",
      "events": [
        "contact.created",
        "contact.updated",
        "deal.stage_changed"
      ],
      "enabled": true,
      "api_version": "2026-09-01",
      "secret_last4": "a9Fq",
      "consecutive_failures": 0,
      "disabled_at": null,
      "disabled_reason": null,
      "last_success_at": "2026-09-02T10:06:00.000Z",
      "last_error": null,
      "last_error_at": null,
      "created_at": "2026-09-01T08:00:00.000Z",
      "updated_at": "2026-09-02T10:06:00.000Z"
    }
  ]
}

Response

Wrapped in { data: … }

Name	Type	Description
`id`required	`string (uuid)`	UUID
`url`required	`string`	Where events are POSTed
`description`required	`string \| null`
`events`required	`string[]`	Subscribed event types
`enabled`required	`boolean`	false = nothing is delivered; pending deliveries wait
`api_version`required	`string`	The payload version this endpoint receives
`secret_last4`required	`string`	The last four characters of the signing secret
`consecutive_failures`required	`integer`	Unbroken run of failed deliveries; reset to 0 on success
`disabled_at`required	`string (date-time) \| null`
`disabled_reason`required	`string \| null`	Why it is off — `auto: …` when the platform switched it off
`last_success_at`required	`string (date-time) \| null`
`last_error`required	`string \| null`
`last_error_at`required	`string (date-time) \| null`
`created_at`required	`string (date-time)`	ISO 8601 timestamp
`updated_at`required	`string (date-time)`	ISO 8601 timestamp

Errors

Status	Code	When
401	`unauthorized`	No usable API key: the Authorization header is missing or malformed, or the key is unknown, revoked or expired. The three are deliberately indistinguishable.
403	`forbidden`	The key is valid but lacks the scope this endpoint requires, or the request came from an address outside the key’s IP allowlist. The message says which.
403	`account_suspended`	The account this key belongs to is suspended. Rotating the key will not help; contact support.
429	`rate_limited`	The per-key budget, or the per-IP budget for failed authentication, is exhausted. Honour `Retry-After` before retrying.
500	`internal`	Something failed on our side. Safe to retry with the same Idempotency-Key; quote `request_id` if it persists.