List webhook subscriptions
List the webhook subscriptions owned by the caller's API key, oldest first. The raw signing secret is never included — only its secretHash.
Authorization
bearerAuth API key for authentication.
In: header
Response Body
application/json
application/json
curl -X GET "https://api.staging.across.to/v1/webhooks/subscriptions"{
"data": [
{
"id": "whsub_1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d",
"url": "https://example.com/webhooks/across",
"filter": {
"eventTypes": [
"pda_transfer.deposit-pending"
]
},
"enabled": true,
"secretHash": "9f2c3b7a1e4d5f6089ab2c3d4e5f60718293a4b5c6d7e8f9012345678abcdef0"
}
]
}{
"error": "UnauthorizedError",
"message": "A valid Authorization: Bearer <apiKey> header is required."
}Create a webhook subscription POST
Register an HTTPS endpoint to receive webhook events for deposit-address transfers. Requires an API key with the `deposit-address` permission (Bearer auth). A subscription is persistent: it receives every matching event — across all of your deposit addresses — until you delete it. A 2xx response to a delivery only acknowledges that one event; it does not end the subscription. The signing `secret` is returned **once** in this response and never again — store it to verify delivery signatures.
Delete a webhook subscription DELETE
Delete one of the caller's subscriptions by id. Returns 204 on success, 404 if the id is not one of the caller's subscriptions.