Retrieve a webhook
One webhook, without its secret.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The form's id, as shown in the dashboard and in the form's endpoint URL
The webhook's id, from the list or from the response that created it
Response
"whk_3f9Kq2bLm8xZpQ1rT7vWc0"
"https://example.com/hooks/formcarry"
"CRM sync"
How deliveries are signed: an HMAC-SHA256 of "." with the secret, sent as "t=,v1=" in this header. Recompute it over the raw body you received, compare in constant time, and refuse a timestamp older than a few minutes. Retries are signed again with a fresh timestamp.
Always null: the delivery log is the record, at GET .../webhooks/{webhook_id}/deliveries.
"2026-09-13T12:00:00.000Z"