List webhooks

List webhooks the caller may read. Every page is filtered by level: webhooks:read reveals space-level rows, org-webhooks:read org-level ones, so holding one half yields a shorter page rather than a 403. The default filter returns the org-level rows; spaceId adds the rows pinned to that space (and takes its permission from that space); all=true spans every space in the org and therefore requires org-webhooks:read.

GET/api/webhooks

Authorization

better-auth.session_token<token>

Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.

In: cookie

Query Parameters

spaceId?string

Filter — include webhooks pinned to this space (plus org-level).

all?string

When true, span every space in the org (org-level + every space-level). Requires org-webhooks:read. Overrides spaceId.

Value in"true"

Header Parameters

X-Org-Id?string

Organization ID. Required for cookie auth. Not needed for API key auth (org resolved from key).

Formatuuid

X-Space-Id?string

Space ID. Required for space-scoped routes (agents, runs, schedules, and space-scoped module routes). Not needed for API key auth (space resolved from key).

curl -X GET "https://your-instance/api/webhooks"

{
  "object": "list",
  "data": [
    {
      "id": "wh_cm1abc123",
      "object": "webhook",
      "level": "space",
      "spaceId": "spc_8a3b6d9f-1e42-4c07-b5d8-6f0a2c4e8b13",
      "url": "https://example.com/webhooks/appstrate",
      "events": [
        "run.success",
        "run.failed"
      ],
      "packageId": null,
      "payloadMode": "full",
      "enabled": true,
      "createdAt": "2026-01-15T10:30:00Z",
      "updatedAt": "2026-01-15T10:30:00Z"
    }
  ],
  "hasMore": false
}

{
  "type": "https://docs.appstrate.dev/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Invalid or missing session",
  "code": "unauthorized",
  "request_id": "req_abc123"
}

{
  "type": "https://docs.appstrate.dev/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "Insufficient permissions",
  "code": "forbidden",
  "request_id": "req_abc123"
}

{
  "type": "https://docs.appstrate.dev/errors/not-found",
  "title": "Not Found",
  "status": 404,
  "detail": "Resource not found",
  "code": "not_found",
  "request_id": "req_abc123"
}

{
  "type": "https://docs.appstrate.dev/errors/rate-limited",
  "title": "Rate Limited",
  "status": 429,
  "detail": "Too many requests. Please try again shortly.",
  "code": "rate_limited",
  "request_id": "req_abc123",
  "retry_after": 30
}