List Webhooks

This API allows you to retrieve a list of registered webhooks for your company. You can filter by webhook ID, type, or specific mirror account to narrow down the results.

Headers

ParameterTypeDescriptionExample
AuthorizationStringBearer + Access_tokenBearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzEzMzAwOTMxLCJpYXQiOjE3MTMyOTczMzEsImp0aSI6Ijc2ZWI4ZTE5ZjM4YjQ4NmZiODdmNzNjNTdkMWVmNDJhIiwidXNlcl9pZCI6MjQ2fQ.5zekMa7CUj9p-MvNHns5ke4ZPhYV3Y1CLOsYL7hDUUo
hmacStringHMAC (Hash-based Message Authentication Code) is an authentication algorithm that combines a private key with a message to create a Message Authentication Code (MAC).hmac: 57373705c83bc5efe41001790c54642e670088c0c87d56bc8f990f2260c7740b99f4081ff231b87f82118c1e77a959e1f40eacf690a8fa61a827a9ba01d546f6

Query Parameters

source_account_branch_identifier and source_account_number are required. The remaining parameters are optional filters.

ParameterTypeDescriptionRequired or OptionalExample
source_account_branch_identifierStringBranch identifier (agency number) of the mirror account to list webhooks for.required0001
source_account_numberStringAccount number of the mirror account to list webhooks for.required123456
webhook_idIntegerFilter by specific webhook ID. Returns only the webhook with this ID.optional789
type_webhookStringFilter by webhook type. Returns all webhooks of this type. See "Available Webhook Types" section for valid values.optionalPIX_CASHOUT_SUCCESS

Request Examples

Get all webhooks for a specific account:

GET /api/webhooks?source_account_branch_identifier=0001&source_account_number=123456

Get a specific webhook by ID:

GET /api/webhooks?source_account_branch_identifier=0001&source_account_number=123456&webhook_id=789

Filter by webhook type for a specific account:

GET /api/webhooks?source_account_branch_identifier=0001&source_account_number=123456&type_webhook=PIX_CASHOUT_SUCCESS

Combine all filters:

GET /api/webhooks?source_account_branch_identifier=0001&source_account_number=123456&type_webhook=CASHIN&webhook_id=789

Available Webhook Types

TypeDescription
ALLReceives notifications for all transaction types
INTERNALReceives notifications for internal transactions (transfers between accounts in the same institution)
INTERNAL APPROVEReceives notifications when internal transactions are approved
INTEGRATIONReceives notifications for integration events
CASHINReceives notifications for all cash-in transactions (money entering the account)
CASHOUTReceives notifications for all cash-out transactions (money leaving the account)
PIX_CASHOUT_CREATEDReceives notifications when a PIX cashout is created
PIX_CASHOUT_SUCCESSReceives notifications when a PIX cashout is successfully completed

Response Details

[
  {
    "id": 789,
    "url": "https://your-domain.com/webhook/endpoint",
    "type_webhook": "PIX_CASHOUT_SUCCESS",
    "authorization_token": "Bearer your-custom-token-here",
    "x_functions_key": "your-azure-function-key",
    "created_at": "2026-04-18T10:30:00Z",
    "updated_at": "2026-04-18T10:30:00Z"
  },
  {
    "id": 790,
    "url": "https://your-domain.com/webhook/cashin",
    "type_webhook": "CASHIN",
    "authorization_token": null,
    "x_functions_key": null,
    "created_at": "2026-04-17T14:20:00Z",
    "updated_at": "2026-04-17T14:20:00Z"
  }
]
FieldDescription
idUnique webhook identifier. Use this ID to update or delete the webhook.
urlThe webhook URL that receives the POST notifications
type_webhookThe type of event configured for this webhook
authorization_tokenThe authorization token configured (null if not set)
x_functions_keyThe Azure Functions key configured (null if not set)
created_atTimestamp when the webhook was created
updated_atTimestamp when the webhook was last updated

Note: The response is always an array, even if filtering by webhook_id returns a single result or no results.

Error Responses

HTTP CodeError MessageDescription
400Company not foundThe authenticated company was not found in the system. Verify your authentication token.
400Account not foundThe specified mirror account was not found, does not belong to your company, or your user does not have an active policy for it.
400Account is closedThe specified mirror account is closed. Cannot retrieve webhooks for closed accounts.
422Validation errorRequired query parameters are missing or invalid.

Business Rules

Filtering Behavior:

  • source_account_branch_identifier and source_account_number are mandatory — the list is always scoped to a specific account
  • Account only: Returns all webhooks for the account
  • + webhook_id: Also filters by the specific webhook ID
  • + type_webhook: Also filters by webhook type
  • Multiple optional filters combine with AND logic

Account Validation:

  • When filtering by account, the system validates:
    • User has permission to access the account
    • Account exists and belongs to the company
    • Account is not closed

Response Characteristics:

  • Empty array [] is returned when no webhooks match the filters
  • Results are not paginated (returns all matching webhooks)
  • Webhooks are returned in the order they were created (oldest first)
Responses

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json