Skip to main content
GET
Retrieve a webhook

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

form_id
string
required

The form's id, as shown in the dashboard and in the form's endpoint URL

webhook_id
string
required

The webhook's id, from the list or from the response that created it

Response

id
string
required
read-only
Example:

"whk_3f9Kq2bLm8xZpQ1rT7vWc0"

url
string
required
Example:

"https://example.com/hooks/formcarry"

enabled
boolean
required
description
string | null
required
Example:

"CRM sync"

events
string[]
required
Example:
signing
object
required

How deliveries are signed: an HMAC-SHA256 of "." with the secret, sent as "t=,v1=" in this header. Recompute it over the raw body you received, compare in constant time, and refuse a timestamp older than a few minutes. Retries are signed again with a fresh timestamp.

last_delivery
object | null
required

Always null: the delivery log is the record, at GET .../webhooks/{webhook_id}/deliveries.

created_at
string
required
read-only
Example:

"2026-09-13T12:00:00.000Z"