> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sitevisit.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List webhook endpoints

> Return every webhook endpoint owned by the authenticated account. Signing secrets are **never** included on read — they're shown exactly once at creation. Not paginated; the per-account endpoint count is small enough to ship as a single response.



## OpenAPI

````yaml /api-reference/openapi.json get /webhook-endpoints
openapi: 3.1.0
info:
  title: SiteVisit AI API
  version: 1.0.0
  description: >-
    Public REST API for SiteVisit AI. Read and write properties, site visits,
    and action items from your account. 


    ## Authentication


    Authenticate with a `Bearer sv_live_...` token issued in Settings →
    Developers. Two key modes are supported:


    - **Live keys (`sv_live_*`)** — operate on your real customer data. Counts
    against plan limits, fires real webhooks + PostHog activation events.

    - **Test keys (`sv_test_*`)** — operate on a parallel sandbox dataset (every
    resource is tagged `isTest=true`). Test data is free + unmetered, never
    counts against plan limits, and never crosses into live data. Use for
    development + integration testing without touching production.


    Test-mode webhook endpoints (configured with `mode=test` in the Settings UI)
    only receive events triggered by test keys; live endpoints only receive live
    events. Webhook payloads include a `livemode: bool` flag so receivers can
    branch without parsing the resource.
  contact:
    name: SiteVisit AI Support
    email: support@sitevisit.app
servers:
  - url: https://sitevisit.app/api/v1
    description: Production
security:
  - bearerAuth: []
paths:
  /webhook-endpoints:
    get:
      summary: List webhook endpoints
      description: >-
        Return every webhook endpoint owned by the authenticated account.
        Signing secrets are **never** included on read — they're shown exactly
        once at creation. Not paginated; the per-account endpoint count is small
        enough to ship as a single response.
      responses:
        '200':
          description: List of webhook endpoints.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/WebhookEndpoint'
                required:
                  - data
        '401':
          description: Missing or invalid API key.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
components:
  schemas:
    WebhookEndpoint:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        url:
          type: string
          format: uri
        events:
          type: array
          items:
            type: string
          description: >-
            Events this endpoint subscribes to. An empty array means **all
            events** — the endpoint will receive every event type. See the
            Webhooks guide for the full event catalogue.
        mode:
          type: string
          enum:
            - live
            - test
          description: >-
            Which traffic class this endpoint receives. `live` endpoints fire on
            real customer activity; `test` endpoints only fire on activity
            triggered by `sv_test_*` API keys. Lets integrators wire a localhost
            endpoint against test mode without it ever receiving real-customer
            traffic.
        disabled:
          type: boolean
          description: >-
            When true, the endpoint is paused — events are not delivered, but
            the row + signing secret remain so it can be re-enabled later.
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
      required:
        - id
        - name
        - url
        - events
        - mode
        - disabled
        - createdAt
        - updatedAt
    ErrorResponse:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              example: invalid_api_key
            message:
              type: string
              example: The API key provided is invalid, revoked, or doesn't exist.
            docs_url:
              type: string
              format: uri
            request_id:
              type: string
              example: req_abc123
          required:
            - code
            - message
            - docs_url
            - request_id
      required:
        - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: sv_live_xxx (or sv_test_xxx for sandbox mode)
      description: >-
        Bearer API key. Two modes: `sv_live_*` for production data, `sv_test_*`
        for a parallel sandbox dataset that doesn't count against plan limits.
        Issued from Settings → Developers in the SiteVisit app.

````