One webhook endpoint

GEThttps://api.norreach.app/v1/webhook-endpoints/{id}

A webhook endpoint (never its secret).

webhooks:readOperation id: get_webhook_endpoint

GET/webhook-endpoints/{id}

curl -X GET "https://api.norreach.app/v1/webhook-endpoints/{id}" \
  -H "Authorization: Bearer $NORREACH_API_KEY"

One webhook endpoint

{
  "id": "0f1a2b3c-4d5e-4f6a-8b7c-9d0e1f2a3b4c",
  "object": "webhook_endpoint",
  "url": "https://hooks.example.com/norreach",
  "description": "CRM sync",
  "event_types": [
    "lead.submitted",
    "contact.created"
  ],
  "status": "active",
  "include_content": false,
  "disabled_reason": null,
  "created_by": "0b6f8a52-8d9e-4c1a-b7f3-5e2d9c4a1b00",
  "created_via_key": true,
  "previous_secret_valid_until": null,
  "created_at": "2026-11-04T09:12:33.120Z",
  "updated_at": "2026-11-04T09:12:33.120Z"
}

Authorizations

Authorizationstringheaderrequired

Bearer authentication: send Authorization: Bearer <key>, with an API key or an OAuth access token. The key needs the scope webhooks:read. API keys and scopes

Path parameters

idstring (uuid)pathrequired

An id (UUID).

Response

200application/json— One webhook endpoint

idstring (uuid)required

An id (UUID).

object"webhook_endpoint"required

urlstringrequired

descriptionstring | nullrequired

event_typesstring[]required

statusenumrequired

paused = the person who made it left; an admin takes it over in Settings.

One of:activedisabledpaused

include_contentbooleanrequired

Message events carry the subject and text.

disabled_reasonstring | nullrequired

by_user, gone (the endpoint answered 410), failing, creator_inactive.

created_bystring (uuid) | nullrequired

created_via_keybooleanrequired

previous_secret_valid_untilstring | nullrequired

After a rotation the old secret also signs until then.

created_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

updated_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

Errors

Errors are application/problem+json with a stable code.

Status	Code	Meaning
400	`bad_request`	The request couldn't be read.
400	`unknown_field`	The request has a field this operation doesn't know.
401	`unauthorized`	A valid API key is required.
403	`insufficient_scope`	This API key doesn't have the scope this operation needs.
403	`feature_not_enabled`	The API isn't switched on for this workspace.
404	`not_found`	That doesn't exist.
429	`rate_limited`	Too many requests. Slow down and try again.
500	`server_error`	Something went wrong on our side.
503	`unavailable`	The API isn't available right now. Try again shortly.

GET/webhook-endpoints/{id}

curl -X GET "https://api.norreach.app/v1/webhook-endpoints/{id}" \
  -H "Authorization: Bearer $NORREACH_API_KEY"

One webhook endpoint

{
  "id": "0f1a2b3c-4d5e-4f6a-8b7c-9d0e1f2a3b4c",
  "object": "webhook_endpoint",
  "url": "https://hooks.example.com/norreach",
  "description": "CRM sync",
  "event_types": [
    "lead.submitted",
    "contact.created"
  ],
  "status": "active",
  "include_content": false,
  "disabled_reason": null,
  "created_by": "0b6f8a52-8d9e-4c1a-b7f3-5e2d9c4a1b00",
  "created_via_key": true,
  "previous_secret_valid_until": null,
  "created_at": "2026-11-04T09:12:33.120Z",
  "updated_at": "2026-11-04T09:12:33.120Z"
}