Skip to main content
GET
curl

Authorizations

x-api-key
string
header
required

Path Parameters

destination_uuid
string<uuid>
required

UUID of the destination (the uuid returned from create / list).

Response

Webhook destination details.

uuid
string<uuid>
label
string
url
string<uri>
enabled
boolean
webhook_version
enum<string>
Available options:
v1,
v2,
v3
secret_shared_key
string

HMAC signing secret (43-character URL-safe token). Always returned in full to API-key callers; Console users need read:webhooks, otherwise an empty string.

subscribed_events
enum<string>[]

Event filter for this webhook destination. Didit delivers only webhooks whose event type exactly matches one of these values — there is no wildcard subscription. When sent, the list must contain at least one valid event (an explicit [] is rejected with 400); a destination whose list is empty (field omitted at create) receives nothing. On update the list is replaced wholesale, never merged.

Minimum array length: 1

Supported webhook event name. Use these exact strings in subscribed_events; unsupported values are rejected.

Available options:
status.updated,
data.updated,
user.status.updated,
user.data.updated,
business.status.updated,
business.data.updated,
activity.created,
transaction.created,
transaction.status.updated,
travel_rule.status.updated
Example:
created_at
string<date-time>
updated_at
string<date-time>
summary
object

Delivery health metrics aggregated over the destination's lifetime.