# List webhook endpoints — Shorty API

> Returns the authenticated account’s webhook endpoints, newest first. Signing secrets are never listed: an endpoint’s secret is returned once, when it is created.

```http
GET /v1/webhook-endpoints
```

Returns the authenticated account’s webhook endpoints, newest first. Signing secrets are never listed: an endpoint’s secret is returned once, when it is created.

## Authentication

Requires a Bearer credential — a `shk_live_` API key or an OAuth 2.1 access token with the scope for this resource. See [Authentication](/docs/api).

## Example request

curl:

```bash
curl -X GET https://aishorty.com/v1/webhook-endpoints \
  -H "Authorization: Bearer shk_live_your_key"
```

TypeScript (@aishorty/sdk):

```typescript
import { Shorty } from '@aishorty/sdk'

const shorty = new Shorty({ apiKey: process.env.SHORTY_API_KEY })

const { data } = await shorty.request({
    method: 'GET',
    path: '/v1/webhook-endpoints',
})
```

## Response · 200

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `data` | `WebhookEndpoint[]` | Yes | The account’s endpoints, newest first. |

## Errors

On failure this endpoint returns an RFC 9457 problem body. Possible statuses:

- `401`
- `403`
- `429`
- `500`

Switch on the problem `code`, not the status. See the [error reference](/docs/api/errors) for every code and how to fix it.