Get the signing secret

curl https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

GET

api

webhook_endpoints

{id}

secret

curl https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

string

required

The endpoint id.

curl https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

Use it to verify the signature header on every delivery. Reads of the secret are logged.