Get a webhook endpoint’s signing secret
/v1/webhook_endpoints/{id}/secretThe endpoint’s CURRENT signing secret, as its own object so a list or retrieve can never disclose it. Use it when the create response is not available to you: you re-used an endpoint that already existed on your URL, the endpoint was pending when you created it (secret was null), or the club rotated the secret. Needs webhook_endpoints:write AND every scope the endpoint holds (the secret lets its holder forge deliveries), the same rule as an update. A pending endpoint is connected to the delivery provider first; 409 endpoint_pending when that is not possible yet or the provider cannot answer.
Authorization
bearerAuth Your club API key. Send it as Authorization: Bearer oc_live_….
In: header
Path Parameters
Header Parameters
The API version to serve this request at, e.g. 2026-11-01. Omit it to use the version your API key is pinned to. An unknown or retired version is a 400 (invalid_api_version / api_version_retired).
"2026-11-01"Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://api.getopencourt.com/v1/webhook_endpoints/8f1b2c3d-4e5f-4a6b-9c7d-0e1f2a3b4c5d/secret"{
"object": "webhook_endpoint_secret",
"endpoint_id": "8f1b2c3d-4e5f-4a6b-9c7d-0e1f2a3b4c5d",
"secret": "whsec_R2FsYWN0aWNGZWRlcmF0aW9u"
}{
"error": {
"type": "string",
"code": "string",
"message": "string",
"param": "string",
"request_id": "string"
}
}{
"error": {
"type": "string",
"code": "string",
"message": "string",
"param": "string",
"request_id": "string"
}
}{
"error": {
"type": "string",
"code": "string",
"message": "string",
"param": "string",
"request_id": "string"
}
}{
"error": {
"type": "string",
"code": "string",
"message": "string",
"param": "string",
"request_id": "string"
}
}{
"error": {
"type": "string",
"code": "string",
"message": "string",
"param": "string",
"request_id": "string"
}
}