API Reference

List webhook subscriptions

Requires subscriptions:manage and lists only webhook subscriptions owned by the authenticated principal. This read-only operation accepts a limit from 1 to 100.

GET/v1/subscriptions

Requires subscriptions:manage and lists only webhook subscriptions owned by the authenticated principal. This read-only operation accepts a limit from 1 to 100.

Authorization

bearerAuth
AuthorizationBearer <token>

In: header

Query Parameters

limit?integer

Maximum records to return. Must be between 1 and 100.

Range1 <= value <= 100
Default50

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/subscriptions"
{  "subscriptions": [    {      "active": true,      "createdAt": "string",      "events": [        "string"      ],      "health": "string",      "id": "string",      "kmsKeyId": "string",      "ownerPrincipalId": "string",      "url": "string"    }  ]}

Create short-lived stream token POST

Mints a single-use, five-minute stream token for an authenticated principal with at least one workflow entitlement. This mutates token storage but no execution state; the token can authenticate GET /v1/streams/events without exposing the API key in its URL.

Create webhook subscription POST

Requires subscriptions:manage. Registers the authenticated principal's public HTTPS callback after URL safety validation, encrypts the shared secret without returning it, and responds with the new subscription.