> ## Documentation Index
> Fetch the complete documentation index at: https://developer.hubmessage.io/llms.txt
> Use this file to discover all available pages before exploring further.

# List webhooks

> List all webhooks for a channel

## Overview

Returns all webhooks registered on a channel. The `auth.configured` field indicates whether authentication credentials are set, but the credentials themselves are **not returned** for security reasons.

The `secret` field (HMAC signing) is also **not returned** in the list — it is only available at the time of creation or when updating with `signing: true`.

<Note>
  This endpoint requires the **ENTERPRISE** role on your account.
</Note>


## OpenAPI

````yaml en/webhooks/openapi.json GET /v1/channels/{channelId}/webhooks
openapi: 3.1.0
info:
  title: Hub Message - Webhooks API
  description: >-
    API to create and manage webhook endpoints per channel. Requires ENTERPRISE
    role.
  version: 1.0.0
servers:
  - url: https://api.hubmessage.io
security:
  - bearerAuth: []
paths:
  /v1/channels/{channelId}/webhooks:
    get:
      tags:
        - Webhooks
      summary: List webhooks
      description: >-
        Returns all webhooks registered on the channel. Authentication
        credentials and the HMAC `secret` are not returned for security reasons.
      operationId: listWebhooks
      parameters:
        - name: channelId
          in: path
          required: true
          description: Channel ID
          schema:
            type: string
            example: 019E4C54B1B375A28970B605CA9B03C3
      responses:
        '200':
          description: List of channel webhooks
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/WebhookResponse'
              example:
                - id: A1B2C3D4E5F6789012345678901234AB
                  channelId: 019E4C54B1B375A28970B605CA9B03C3
                  instanceId: 019E4C54B1B375A28970B605CA9B03C3
                  url: https://app.yourcompany.com/webhooks/hubmessage
                  description: Main production webhook
                  events:
                    - MESSAGE_RECEIVED
                    - MESSAGE_STATUS
                  status: ENABLED
                  signing: true
                  auth:
                    type: BEARER
                    configured: true
                  payloadFormat: DEFAULT
                  customAttributes: {}
                  createdAt: 2025-01-15T10:30:00.000+0000
                  updatedAt: 2025-01-15T10:30:00.000+0000
                - id: B2C3D4E5F6789012345678901234AB12
                  channelId: 019E4C54B1B375A28970B605CA9B03C3
                  instanceId: 019E4C54B1B375A28970B605CA9B03C3
                  url: https://app.yourcompany.com/webhooks/connection-events
                  description: Connection events
                  events:
                    - CONNECTED
                    - DISCONNECTED
                  status: ENABLED
                  signing: false
                  auth:
                    type: NONE
                    configured: false
                  payloadFormat: DEFAULT
                  customAttributes: {}
                  createdAt: 2025-01-16T08:00:00.000+0000
                  updatedAt: 2025-01-16T08:00:00.000+0000
        '401':
          $ref: '#/components/responses/Unauthorized'
        '422':
          description: Business rule violation — account does not have ENTERPRISE role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
              example:
                error: 422
                message: This action requires ENTERPRISE role
components:
  schemas:
    WebhookResponse:
      type: object
      properties:
        id:
          type: string
          description: Unique webhook ID
          example: A1B2C3D4E5F6789012345678901234AB
        channelId:
          type: string
          description: ID of the channel this webhook belongs to
          example: 019E4C54B1B375A28970B605CA9B03C3
        instanceId:
          type: string
          deprecated: true
          description: Deprecated — use `channelId` instead
          example: 019E4C54B1B375A28970B605CA9B03C3
        url:
          type: string
          description: Event destination URL
          example: https://app.yourcompany.com/webhooks/hubmessage
        description:
          type: string
          nullable: true
          description: Webhook description
          example: Main production webhook
        events:
          type: array
          description: Configured event types
          items:
            type: string
          example:
            - MESSAGE_RECEIVED
            - MESSAGE_STATUS
        status:
          type: string
          enum:
            - ENABLED
            - DISABLED
          description: Current webhook status
          example: ENABLED
        signing:
          type: boolean
          description: Indicates whether HMAC signing is enabled
          example: true
        auth:
          $ref: '#/components/schemas/WebhookAuthInfo'
        payloadFormat:
          type: string
          enum:
            - DEFAULT
          description: Delivered payload format
          example: DEFAULT
        customAttributes:
          type: object
          additionalProperties: true
          description: Configured extra attributes
          example: {}
        createdAt:
          type: string
          format: date-time
          description: Creation date
          example: 2025-01-15T10:30:00.000+0000
        updatedAt:
          type: string
          format: date-time
          description: Last update date
          example: 2025-01-15T10:30:00.000+0000
    Error:
      type: object
      properties:
        error:
          type: integer
        message:
          type: string
    WebhookAuthInfo:
      type: object
      description: >-
        Summary of configured authentication — credentials are not returned for
        security
      properties:
        type:
          type: string
          enum:
            - NONE
            - BEARER
            - API_KEY
            - BASIC
            - CUSTOM_HEADER
          example: BEARER
        configured:
          type: boolean
          description: '`true` when credentials are configured'
          example: true
  responses:
    Unauthorized:
      description: Invalid or missing token.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error: 401
            message: Unauthorized
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Secret Key generated in the Hub Message Security panel

````