List webhook endpoints

GET/v1/webhook_endpoints

Authorization

Send your API key as a bearer token in the Authorization header. Secret API key: Authorization: Bearer ctp_live_sk_…. A publishable key (ctp_…_pk_…) is accepted by these operations only, which serve reference data: getRate, listAssets, listNetworks (each marked x-publishable-key: true). Every other operation refuses it with 403 publishable_key_not_allowed, whatever Origin the request carries: that header binds browsers, not other clients, and nothing on this API relies on it.

Query parameters

Name	Type	Description
limit	integer	Number of items to return (1 to 100). Default 50. Minimum 1, maximum 100.
starting_after	string	Return items after this id: pass next_cursor of the previous page. At most 100 characters.

Example request

cURL

curl "https://api.ctpeway.com/v1/webhook_endpoints" \
  -H "Authorization: Bearer $CTPEWAY_API_KEY"

Node SDK

import { CtpeWay } from '@ctpeway/sdk';

const ctpeway = new CtpeWay(process.env.CTPEWAY_API_KEY);

const result = await ctpeway.webhookEndpoints.list();

Response

200 OK

Field	Type	Description
data	array of objects
data[].id	string	24 hexadecimal characters.
data[].url	string
data[].description optional	string
data[].events	array of strings	Event types this endpoint receives, or ["*"] for all.
data[].status	string	failing: a delivery ran out of retries; deliveries continue. disabled: nothing is sent. One of enabled, disabled, failing.
data[].secret_last4	string	Last four characters of the signing secret.
data[].previous_secret_expires_at optional	string (date-time)	After a rotation: until then deliveries are also signed with the previous secret.
data[].failing_since optional	string (date-time)
data[].last_success_at optional	string (date-time)
data[].livemode	boolean
data[].created_at	string (date-time)
data[].updated_at	string (date-time)
has_more	boolean	Whether more items exist after this page.
next_cursor	string or null	Pass as starting_after to get the next page; null on the last page.

{
  "data": [
    {
      "id": "0123456789abcdef01234567",
      "url": "string",
      "description": "string",
      "events": [
        "string"
      ],
      "status": "enabled",
      "secret_last4": "string",
      "previous_secret_expires_at": "2026-01-01T00:00:00.000Z",
      "failing_since": "2026-01-01T00:00:00.000Z",
      "last_success_at": "2026-01-01T00:00:00.000Z",
      "livemode": true,
      "created_at": "2026-01-01T00:00:00.000Z",
      "updated_at": "2026-01-01T00:00:00.000Z"
    }
  ],
  "has_more": true,
  "next_cursor": "string"
}

The values are placeholders generated from the schema. They show the shape, not real data.

Errors

A failed request answers with the error format described under Errors.

Besides the codes any endpoint can return, this endpoint can answer with these code values:

• webhook_endpoint_not_found