GET
/api/v1/webhook-endpoints
Lists the team's outbound webhook endpoints (incident tools, internal automations, partner intakes). Secret-carrying fields are never returned; url_host identifies each destination.
Response
{
"total": 1,
"data": [
{
"id": 4,
"name": "Rootly",
"url_host": "webhooks.rootly.com",
"auth_type": "bearer",
"auth_header_name": null,
"severities": ["critical", "warning"],
"is_active": true,
"last_delivered_at": "2026-08-14T17:46:02Z",
"created_at": "2026-08-13T15:31:44Z"
}
]
}The endpoint object
url, auth_token, and signing_secret are write-only: they are accepted when creating or updating but never returned, because webhook URLs and tokens routinely carry credentials. url_host is the readable identifier for the destination.
| Field | Description |
|---|---|
url_host | Host part of the configured URL (read-only) |
auth_type | none, bearer, basic, or header |
auth_header_name | Header carrying the token when auth_type is header |
severities | Severities this endpoint receives: critical, warning, info. Omitted on create means all three. |
is_active | Inactive endpoints are kept but receive nothing |
last_delivered_at | When an alert was last delivered here; null if never |