> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tilta.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List subscriptions

> Retrieve all active webhook subscriptions registered for your platform, including their configured event types and target endpoint URLs.

Use this endpoint to audit the webhook subscriptions currently active on your platform. The response lists every subscription you have created, showing the event type or prefix and the destination URL for each one. Note that `signature_key` values are **not** included in list responses – they are only revealed at creation or after a key rotation.

<Note>
  `signature_key` values are intentionally omitted from list responses for security reasons. If you need to verify or replace a
  key, use the [Rotate Signature Key](/api-reference/webhooks/rotate-signature-key) endpoint.
</Note>

<Tip>
  If this endpoint returns an empty array, no subscriptions are active and your platform receives no webhook notifications. Use
  [Create Subscription](/api-reference/webhooks/create-subscription) to start receiving events.
</Tip>


## OpenAPI

````yaml GET /v1/webhooks
openapi: 3.0.0
info:
  version: 0.0.1
  title: Tilta API
  description: Tilta API documentation
servers:
  - url: https://api.tilta.io
    description: Tilta Production API
  - url: https://api.tilta-sandbox.io
    description: Tilta Sandbox API
security: []
paths:
  /v1/webhooks:
    get:
      tags:
        - Webhooks
      summary: List webhook subscriptions
      description: Returns an array of Webhook subscriptions.
      parameters:
        - schema:
            $ref: '#/components/schemas/limit'
          required: false
          description: The number of records to be taken.
          name: limit
          in: query
        - schema:
            allOf:
              - $ref: '#/components/schemas/offset'
              - nullable: true
          required: false
          description: The number of records to be skipped.
          name: offset
          in: query
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  limit:
                    type: integer
                    minimum: 0
                    description: The number of taken records.
                    example: 100
                  offset:
                    type: integer
                    minimum: 0
                    description: The number of skipped records.
                    example: 0
                  total:
                    type: integer
                    minimum: 0
                    description: Total number of records
                    example: 140
                  items:
                    type: array
                    items:
                      type: object
                      properties:
                        destination_url:
                          type: string
                          format: uri
                          description: >-
                            Where the webhook should be sent to. This must be an
                            endpoint that handles POST requests.
                        type:
                          type: string
                          enum:
                            - BUYER
                            - BUYER.CREATED
                            - BUYER.UPDATED
                            - FACILITY
                            - FACILITY.CREATION
                            - FACILITY.CREATION.ACCEPTED
                            - FACILITY.CREATION.IN_REVIEW
                            - FACILITY.CREATION.REJECTED
                            - FACILITY.EXPIRED
                            - FACILITY.FROZEN
                            - FACILITY.INCREASE
                            - FACILITY.INCREASE.ACCEPTED
                            - FACILITY.INCREASE.IN_REVIEW
                            - FACILITY.INCREASE.REJECTED
                            - FACILITY.RENEWAL
                            - FACILITY.RENEWAL.ACCEPTED
                            - FACILITY.RENEWAL.IN_REVIEW
                            - FACILITY.RENEWAL.REJECTED
                            - FACILITY.UNFROZEN
                            - INVOICE
                            - INVOICE.CLOSED
                            - INVOICE.CREATED
                            - INVOICE.DUE
                            - INVOICE.FILE
                            - INVOICE.FILE.CREATED
                            - INVOICE.FILE.DELETED
                            - INVOICE.FILE.REPLACED
                            - INVOICE.FINANCING
                            - INVOICE.FINANCING.PAID_OUT
                            - ORDER
                            - ORDER.CANCELLED
                            - ORDER.CLOSED
                            - ORDER.CONFIRMED
                            - ORDER.DISBURSED
                            - ORDER.EXPIRED
                          description: >-
                            The webhook's type. Supports the hierarchical
                            dot-notation taxonomy; subscribing to a parent (e.g.
                            `FACILITY`) implicitly subscribes to every
                            descendant event (e.g.
                            `FACILITY.CREATION.ACCEPTED`). Other valid values
                            include `ORDER.CONFIRMED` and `INVOICE.DUE`.
                          example: FACILITY.CREATION.ACCEPTED
                      required:
                        - destination_url
                        - type
                      additionalProperties: false
                required:
                  - limit
                  - offset
                  - total
                  - items
                additionalProperties: false
        '400':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/badRequestSchema'
        '401':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/unauthorizedRequestSchema'
      security:
        - bearerAuth: []
components:
  schemas:
    limit:
      type: integer
      description: The number of records to be taken.
      example: 100
      default: 100
      maximum: 100
    offset:
      type: integer
      description: The number of records to be skipped.
      example: 0
      default: 0
    badRequestSchema:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: BAD_REQUEST
        error:
          type: string
          description: Error message for debugging purposes
          example: Request validation failed. 1 issue found.
        issues:
          type: array
          items:
            type: object
            properties:
              code:
                type: string
                description: Issue code
                example: INVALID_TYPE
              path:
                type: string
                description: Issue path starting with body, params, querystring, or headers
                example: body.registered_at
              message:
                type: string
                description: Issue message for debugging purposes
                example: Invalid type
            required:
              - code
              - path
              - message
          description: List of issues
          example:
            - code: INVALID_TYPE
              path: body.registered_at
              message: Invalid type
      required:
        - code
        - error
        - issues
      description: Bad Request, see error message for details.
      example:
        code: BAD_REQUEST
        error: Request validation failed. 1 issue found.
        issues:
          - code: INVALID_TYPE
            path: body.registered_at
            message: Invalid type
    unauthorizedRequestSchema:
      type: object
      properties:
        error:
          type: string
          description: Error details.
          example: Unauthorized
        code:
          type: string
          description: Error code.
          example: UNAUTHORIZED
      required:
        - error
        - code
      description: Unauthorized Request.
      example:
        error: Unauthorized
        code: UNAUTHORIZED
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Your Tilta API key, sent as `Bearer <key>`.

````