Endpoint
POST /v3/webhooks/get
Authentication and target
Access is resolved through the authenticated credential owner. Account credentials can target only their own account. User credentials must supplyaccount_number for transaction events and omit it for VA Account KYB. Platform credentials can manage only Master Account KYB and must omit account_number. See Webhook Management for the complete event/owner matrix.
Do not send X-ISPB or X-Account-Number with a platform or user credential. An account credential may omit both headers; if sent, both are required and must match its bound account.
Request body
Success data
Awebhook object containing webhook_id, event_type, callback_url, status, created_at, and updated_at. The current response mapper does not populate subscription_id, account_number, or suspend_reason.
Behavior and validation
This is a synchronous read. Usesubscription_id for deterministic selection when more than one record could match the event scope.
Errors
Every call can fail for missing or invalid signature headers, an expired timestamp, nonce replay, an invalid body hash or signature, insufficient permission, or a downstream service error. Endpoint-specific errors include:field_requiredfor missing required selector context.permission_deniedfor an unsupported owner/event/account combination.not_foundwhen no visible subscription matches.