# List webhooks

List all webhooks for a given app as specified by the App ID.

Endpoint: GET /v1/projects/{project_id}/apps/{app_id}/webhooks
Version: 1.0
Security: Basic, oAuth2

## Path parameters:

  - `project_id` (string, required)
    The unique ID of the project. You can find this on the Sinch Dashboard.

  - `app_id` (string, required)
    The unique ID of the app. You can find this on the Sinch Dashboard.

## Response 200 fields (application/json):

  - `webhooks` (array)
    List of webhooks belonging to a specific project ID and app ID

  - `webhooks.target` (string, required)
    The target url where events should be sent to.
Maximum URL length is 742.
The conversation-api.*.sinch.com subdomains are forbidden.

  - `webhooks.app_id` (string)
    The app that this webhook belongs to.

  - `webhooks.client_credentials` (object)
    Optional. Used for OAuth2 authentication.

  - `webhooks.client_credentials.client_id` (string, required)
    The Client ID that will be used in the OAuth2 Client Credentials flow.

  - `webhooks.client_credentials.client_secret` (string, required)
    The Client Secret that will be used in the OAuth2 Client Credentials flow.

  - `webhooks.client_credentials.endpoint` (string, required)
    The endpoint that will be used in the OAuth2 Client Credentials flow. Expected to return a JSON with an access token and expires_in value (in seconds). The expires_in value, which must be a minimum of 30 seconds and a maximum of 3600 seconds, is how long Sinch will save the access token before asking for a new one.

  - `webhooks.client_credentials.scope` (string)
    Optional. Space-separated string per RFC 6749. Used to limit the access granted by the token.
Max length: 1024 characters.
If blank or omitted, this is not included in the token request.

  - `webhooks.client_credentials.response_type` (string)
    Optional. When granting client_credentials, this is generally omitted. If you do provide a value, it will be forwarded to your OAuth provider as-is.
Max length: 64 characters.

  - `webhooks.client_credentials.token_request_type` (string)
    Optional. Controls how client_id and client_secret are sent to the token endpoint. Either BASIC or FORM. If not set or unrecognized, BASIC is used by default.
    Enum: "BASIC", "FORM"

  - `webhooks.id` (string)
    The ID of the webhook.

  - `webhooks.secret` (string)
    Optional secret be used to sign contents of webhooks sent by the Conversation API.
You can then use the secret to verify the signature.

  - `webhooks.target_type` (string)
    Enum: "DISMISS", "HTTP"

  - `webhooks.triggers` (array)
    An array of triggers that should trigger the webhook and result in an
event being sent to the target url.
Refer to the list of [Webhook Triggers](https://developers.sinch.com/docs/conversation/callbacks/#webhook-triggers)
for a complete list.

## Response 400 fields (application/json):

  - `error` (object)

  - `error.code` (integer)

  - `error.details` (array)

  - `error.details.type_url` (string)

  - `error.details.value` (string)

  - `error.message` (string)

  - `error.status` (string)