Skip to content

List webhooks

GET
/v1/webhooks
curl --request GET \
--url 'http://localhost:8080/v1/webhooks?enabled=true&tenant_id=org-123&limit=100' \
--header 'Authorization: Bearer <token>'

Lists webhook endpoints with optional filters and pagination

enabled
boolean

Example

true

Filter by enabled status

tenant_id
string
<= 255 characters /^[^\x00]*$/

Example

org-123

Filter by tenant ID. NULL bytes not allowed.

limit
integer format: int64
default: 100 >= 1 <= 1000

Number of results to return (max 1000)

cursor
string

Omit for the first page. For the next page, use the exact value from the previous response’s next_cursor. Opaque (base64-encoded); keyset pagination.

OK. Returns ListWebhooksOutputBody (items omit signing_key).

Media typeapplication/json
object
data
required

List of webhooks (signing_key omitted for security)

Array<object>

Webhook data for GET and LIST responses; signing_key is omitted for security

object
id
required

Webhook ID (UUID)

string format: uuid
url
required

URL that receives webhook POSTs

string
enabled
required

Whether the webhook is active

boolean
tenant_id

Tenant/organization identifier

string
event_types

Event types this webhook subscribes to (empty = all)

Array<string>
Allowed values: feedback_record.created feedback_record.updated feedback_record.deleted webhook.created webhook.updated webhook.deleted
created_at
required

When the webhook was created

string format: date-time
updated_at
required

When the webhook was last updated

string format: date-time
disabled_reason

Read-only. Set by the system when the webhook was disabled. Omitted when null.

string | null
disabled_at

Read-only. When the webhook was disabled. Omitted when null.

string | null format: date-time
total

Total count matching filters (present when offset-based; omitted when using cursor)

integer format: int64
limit
required

Limit used in query

integer format: int64
offset

Offset used in query (present when offset-based; omitted when using cursor)

integer
next_cursor

Opaque cursor for the next page (keyset paging). Present only when there may be more results. Use as the cursor query param for the next page.

string

Example

{
"data": [
{
"event_types": [
"feedback_record.created"
]
}
]
}

Bad Request (e.g. invalid cursor)

Media typeapplication/problem+json

RFC 9457 problem details (application/problem+json). Branch on the stable code member rather than on title or type.

object
code
required

Stable, machine-readable error code; the primary value to branch on. service_unavailable indicates a feature or dependency is temporarily unavailable and the request may be retried later. tenant_write_conflict indicates the write conflicted with an in-progress tenant data purge (or vice versa) and may be retried later unchanged. All other codes are terminal until the request itself is changed.

string
Allowed values: validation bad_request unauthorized forbidden not_found conflict tenant_write_conflict method_not_allowed content_too_large service_unavailable internal_server_error
detail

A human-readable explanation specific to this occurrence of the problem.

string
details

Optional structured context for this problem, e.g. resource_type on a 404.

object
key
additional properties
any
instance

A URI reference (typically the request path) identifying the specific occurrence of the problem.

string
invalid_params

Field-level validation failures (RFC 9457 “invalid_params” extension). Present on validation errors.

Array<object>
<= 100 items

A single invalid request parameter (RFC 9457 “invalid_params” extension member).

object
name
required

Dotted path to the offending request field, e.g. ‘field_type’ or ‘items[0].field_type’.

string
reason
required

Human- and agent-readable explanation of why the value is invalid, naming allowed values or constraints where applicable so the request can be corrected without guessing.

string
request_id
required

Identifier for this request, also returned in the X-Request-ID response header; include it when reporting a problem.

string
status
required

HTTP status code

integer format: int64
title
required

A short, human-readable summary of the problem type. This value should not change between occurrences of the error.

string
type

A URI reference identifying the problem type.

string format: uri

Example

{
"code": "validation",
"detail": "One or more request parameters are invalid",
"instance": "/v1/feedback-records",
"invalid_params": [
{
"name": "field_type",
"reason": "must be one of: text, categorical, nps, csat, ces, rating, number, boolean, date"
}
],
"request_id": "0190a1b2-c3d4-7e5f-8a9b-0c1d2e3f4a5b",
"status": 400,
"title": "Bad Request",
"type": "https://hub.formbricks.com/problems/bad-request"
}

Error

Media typeapplication/problem+json

RFC 9457 problem details (application/problem+json). Branch on the stable code member rather than on title or type.

object
code
required

Stable, machine-readable error code; the primary value to branch on. service_unavailable indicates a feature or dependency is temporarily unavailable and the request may be retried later. tenant_write_conflict indicates the write conflicted with an in-progress tenant data purge (or vice versa) and may be retried later unchanged. All other codes are terminal until the request itself is changed.

string
Allowed values: validation bad_request unauthorized forbidden not_found conflict tenant_write_conflict method_not_allowed content_too_large service_unavailable internal_server_error
detail

A human-readable explanation specific to this occurrence of the problem.

string
details

Optional structured context for this problem, e.g. resource_type on a 404.

object
key
additional properties
any
instance

A URI reference (typically the request path) identifying the specific occurrence of the problem.

string
invalid_params

Field-level validation failures (RFC 9457 “invalid_params” extension). Present on validation errors.

Array<object>
<= 100 items

A single invalid request parameter (RFC 9457 “invalid_params” extension member).

object
name
required

Dotted path to the offending request field, e.g. ‘field_type’ or ‘items[0].field_type’.

string
reason
required

Human- and agent-readable explanation of why the value is invalid, naming allowed values or constraints where applicable so the request can be corrected without guessing.

string
request_id
required

Identifier for this request, also returned in the X-Request-ID response header; include it when reporting a problem.

string
status
required

HTTP status code

integer format: int64
title
required

A short, human-readable summary of the problem type. This value should not change between occurrences of the error.

string
type

A URI reference identifying the problem type.

string format: uri

Example

{
"code": "validation",
"detail": "One or more request parameters are invalid",
"instance": "/v1/feedback-records",
"invalid_params": [
{
"name": "field_type",
"reason": "must be one of: text, categorical, nps, csat, ces, rating, number, boolean, date"
}
],
"request_id": "0190a1b2-c3d4-7e5f-8a9b-0c1d2e3f4a5b",
"status": 400,
"title": "Bad Request",
"type": "https://hub.formbricks.com/problems/bad-request"
}