List webhook endpoints

GEThttps://api.norreach.app/v1/webhook-endpoints

The workspace's webhook endpoints (at most 10).

webhooks:readOperation id: list_webhook_endpoints

GET/webhook-endpoints

curl -X GET "https://api.norreach.app/v1/webhook-endpoints" \
  -H "Authorization: Bearer $NORREACH_API_KEY"

List webhook endpoints

{
  "object": "list",
  "data": [
    {
      "id": "0f1a2b3c-4d5e-4f6a-8b7c-9d0e1f2a3b4c",
      "object": "webhook_endpoint",
      "url": "https://hooks.example.com/norreach",
      "description": "CRM sync",
      "event_types": [
        "lead.submitted",
        "contact.created"
      ],
      "status": "active",
      "include_content": false,
      "disabled_reason": null,
      "created_by": "0b6f8a52-8d9e-4c1a-b7f3-5e2d9c4a1b00",
      "created_via_key": true,
      "previous_secret_valid_until": null,
      "created_at": "2026-11-04T09:12:33.120Z",
      "updated_at": "2026-11-04T09:12:33.120Z"
    }
  ],
  "has_more": false,
  "next_cursor": null
}

Authorizations

Authorizationstringheaderrequired

Bearer authentication: send Authorization: Bearer <key>, with an API key or an OAuth access token. The key needs the scope webhooks:read. API keys and scopes

Response

200application/json— List webhook endpoints

object"list"required

dataobject[]required

Show child attributes

data[].idstring (uuid)required

An id (UUID).

data[].object"webhook_endpoint"required

data[].urlstringrequired

data[].descriptionstring | nullrequired

data[].event_typesstring[]required

data[].statusenumrequired

paused = the person who made it left; an admin takes it over in Settings.

One of:activedisabledpaused

data[].include_contentbooleanrequired

Message events carry the subject and text.

data[].disabled_reasonstring | nullrequired

by_user, gone (the endpoint answered 410), failing, creator_inactive.

data[].created_bystring (uuid) | nullrequired

data[].created_via_keybooleanrequired

data[].previous_secret_valid_untilstring | nullrequired

After a rotation the old secret also signs until then.

data[].created_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

data[].updated_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

has_morebooleanrequired

next_cursornullrequired

Errors

Errors are application/problem+json with a stable code.

Status	Code	Meaning
400	`bad_request`	The request couldn't be read.
400	`unknown_field`	The request has a field this operation doesn't know.
401	`unauthorized`	A valid API key is required.
403	`insufficient_scope`	This API key doesn't have the scope this operation needs.
403	`feature_not_enabled`	The API isn't switched on for this workspace.
429	`rate_limited`	Too many requests. Slow down and try again.
500	`server_error`	Something went wrong on our side.
503	`unavailable`	The API isn't available right now. Try again shortly.

GET/webhook-endpoints

curl -X GET "https://api.norreach.app/v1/webhook-endpoints" \
  -H "Authorization: Bearer $NORREACH_API_KEY"

List webhook endpoints

{
  "object": "list",
  "data": [
    {
      "id": "0f1a2b3c-4d5e-4f6a-8b7c-9d0e1f2a3b4c",
      "object": "webhook_endpoint",
      "url": "https://hooks.example.com/norreach",
      "description": "CRM sync",
      "event_types": [
        "lead.submitted",
        "contact.created"
      ],
      "status": "active",
      "include_content": false,
      "disabled_reason": null,
      "created_by": "0b6f8a52-8d9e-4c1a-b7f3-5e2d9c4a1b00",
      "created_via_key": true,
      "previous_secret_valid_until": null,
      "created_at": "2026-11-04T09:12:33.120Z",
      "updated_at": "2026-11-04T09:12:33.120Z"
    }
  ],
  "has_more": false,
  "next_cursor": null
}