List webhook keys

GET /api/app/integrations/webhook-keys

Returns all webhook signing keys for the organization, along with the maximum number of keys allowed by the plan. The raw signing secret is never returned after creation.

Requires the admin role and the integrations feature entitlement.

Request

See API Basics for required headers.

This endpoint takes no request body or query parameters.

Sample request

curl https://api.recomly.com/api/app/integrations/webhook-keys \
  -H "Authorization: Bearer rk_live_abc123:def456"

Sample response

Status: 200 OK

{
  "keys": [
    {
      "keyId": "wk_a1b2c3d4e5f6",
      "name": "CRM integration",
      "createdAt": "2026-03-20T10:00:00.000Z",
      "lastUsedAt": "2026-04-14T09:15:00.000Z"
    }
  ],
  "maxKeys": 5
}

lastUsedAt is omitted when the key has never been used.

Error responses

See API Basics for standard status codes and error response format.