Retrieve a webhook
Return a single webhook belonging to your account.
Authorization
ApiKey API key issued to the partner, sent with the Bearer prefix — for example: Authorization: Bearer su_key_9f2c4d1ab3….
Keys minted on the live instance are prefixed su_key_ and keys minted on sandbox su_test_key_. The two instances keep separate key tables and separate hosts, so a sandbox key sent to the live host — or the reverse — answers Invalid API key. rather than falling back to the other environment.
In: header
Path Parameters
Public ID of the webhook (whk_…), as returned in the id field of list or create.
Response Body
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/webhooks/string/"{ "id": "whk_a1b2c3d4e", "event": "checkout.succeeded", "endpoint_url": "https://partner.example.com/hooks/suqo", "is_active": true, "created_at": "2026-07-03T10:15:00Z"}Retrieve the signing secret GET
Return the account's webhook signing secret, minting it on first read. Every delivery we send is signed with it; use it to verify the signature header on your endpoint. It is not rotatable through this API.
Replace a webhook PUT
Overwrite a webhook's event, endpoint and active flag. `event` and `endpoint_url` are both required here; use PATCH to change one field on its own.