# GET /v1/webhooks/{id}

Read a webhook

Takes a server key (`sk_…`, or `sk_test_…` on a test server) as a bearer token. TypeScript: `sendora.webhooks.get(webhookId)`. Python: `sendora.webhooks.get(webhook_id)`.

## Parameters

- `id` (path, required, string (uuid)): The webhook id.

## Responses

### 200 A webhook of this server.

- `webhookId` (string (uuid), required)
- `url` (string, required): Where the events are posted.
- `events` (array of "delivered" | "bounced" | "deferred" | "spam_complaint" | "unsubscribed" | "cap_warning" | "cap_reached" | "inbound", required)
- `streamId` (string (uuid) or null, required): The one stream whose message events it receives; null for every stream.
- `enabled` (boolean, required): False while switched off in the dashboard; nothing is queued for it then.
- `inboundContent` ("full" | "reference", required): How the inbound event carries a received message: the parsed message, or a reference.
- `createdAt` (string (date-time), required)
- `secrets` (array of object, required): The live secrets, oldest first; every delivery is signed with each of them, the newest first in Sendora-Signature.
  - `secretId` (string (uuid), required)
  - `createdAt` (string (date-time), required)

Example:

```json
{
  "webhookId": "7c1e4d2a-0b9f-4a3e-8d6c-5e2f1a9b8c70",
  "url": "https://example.se/hooks/sendora",
  "events": [
    "delivered",
    "bounced",
    "spam_complaint"
  ],
  "streamId": null,
  "enabled": true,
  "inboundContent": "full",
  "createdAt": "2026-09-15T12:00:00.000Z",
  "secrets": [
    {
      "secretId": "4a5b6c7d-8e9f-4a0b-8c1d-2e3f4a5b6c7d",
      "createdAt": "2026-09-15T12:00:00.000Z"
    }
  ]
}
```

## Errors

Every error answers `error`, the code, and `message`, a sentence for a person. A code that adds fields is shown in full below the table.

| Code | Status | Meaning |
| --- | --- | --- |
| `unauthorized` | 401 | The key is missing, malformed or revoked. |
| `wrong_token_kind` | 403 | The key is of the other kind: a server key (sk_) where an account key (ak_) is needed, or the reverse. The message names the kind the operation takes. |
| `not_found` | 404 | No such webhook of this server. |