Developers
API referenceWebhook endpoints

List webhook endpoints

GET
/webhook-endpoints

Webhook endpoints of your company. secret is never included here.

Scope: webhooks:manage.

Authorization

bearerAuth
AuthorizationBearer <token>

A Platform API token, wyc_live_... or wyc_test_..., created at Settings > API tokens in the dashboard.

In: header

Query Parameters

limit?integer

Number of objects to return, 1 to 100.

Range1 <= value <= 100
Default25
starting_after?string

Cursor: the id of the last object of the previous page.

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/webhook-endpoints"
{  "object": "list",  "url": "/v2/webhook-endpoints",  "has_more": false,  "data": [    {      "id": "whe_2xL7rCkZa8bW1vT9yN6pDmQ3",      "object": "webhook_endpoint",      "livemode": true,      "url": "https://example.com/webhooks/woodyoucare",      "description": "CRM sync",      "events": [        "allocation.created",        "allocation.planted",        "verification.published"      ],      "include_personal_data": false,      "status": "enabled",      "disabled_reason": null,      "created_at": "2026-09-28T09:00:00Z",      "updated_at": "2026-09-28T09:00:00Z"    }  ]}

Retrieve a certificate GET

One certificate with a fresh `download_url`. Scope: `certificates:read`.

Create a webhook endpoint POST

Creates an endpoint and returns its signing `secret` once. Store it; it is needed to verify the `WoodYouCare-Signature` header. Endpoints created with a test token only receive test events. Scope: `webhooks:manage`.