Tonedocs
API referenceWebhooks

This endpoint's signing secret

Each endpoint has its own, so rotating one does not disturb the others. A live key or the dashboard only: a test key gets 403, because an endpoint receives live events too.

Open in ClaudeOpen in ChatGPTView as Markdown

Requires the admin scope. A key with less gets 403 insufficient_scope.

GET
/v1/integrations/webhooks/{id}/secret

Authorization

AuthorizationBearer <token>

Authorization: Bearer tone_live_… or tone_test_…. The prefix IS the environment: a test key reaches only the sandbox, and no request field bridges the two.

In: header

Path Parameters

id*string

The webhook endpoint's id.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/integrations/webhooks/string/secret"
{  "data": {    "note": "Signs every delivery to this endpoint as x-tone-signature.",    "secret": "whsec_3f1a7f6e2b4c4d1e9a8b5c6d7e8f9a0b"  }}
Was this page helpful?

Recent webhook deliveries

What was sent, what your endpoint answered and how many attempts it took. The place to look when an integration "missed" an event. Newest first, 50 to a page unless you pass limit; page on with cursor, and read how many there are from the first page's meta.pagination.total.

Webhook endpoints

Every endpoint you have registered, with what it subscribes to and whether it is still enabled.