Skip to content

Get Webhook Subscriptions

GET /api-access/api/webhook-subscriptions

Get all webhook subscriptions for your business.

Authentication

Required Headers:

Authorization: HMAC-SHA256 PUBLIC_KEY:PRIVATE_KEY
X-Origin: third-party-api
X-Timestamp: 2025-10-12T14:30:00.000Z
Content-Type: application/json

Request

No query parameters required.

Response

Success Response (200):

json
{
  "data": [
    {
      "id": "string",
      "url": "https://example.com/",
      "event_type": "string",
      "is_active": true,
      "business_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "created_at": "2025-10-12T10:02:21.563Z",
      "updated_at": "2025-10-12T10:02:21.563Z"
    }
  ],
  "success": true,
  "message": "string",
  "detail": {}
}

Response Fields:

FieldTypeDescription
idstringWebhook subscription ID
urlstringWebhook endpoint URL
event_typestringType of event to subscribe to
is_activebooleanWhether the subscription is active
business_idstringBusiness ID (UUID)
created_atstringTimestamp when subscription was created (ISO 8601)
updated_atstringTimestamp when subscription was last updated (ISO 8601)

Example

bash
curl -X GET "https://sandbox.mara.boo/api-access/api/webhook-subscriptions" \
  -H "Authorization: HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY" \
  -H "X-Origin: third-party-api" \
  -H "X-Timestamp: 2025-10-12T14:30:00.000Z" \
  -H "Content-Type: application/json"
javascript
const response = await fetch('https://sandbox.mara.boo/api-access/api/webhook-subscriptions', {
  method: 'GET',
  headers: {
    'Authorization': 'HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY',
    'X-Origin': 'third-party-api',
    'X-Timestamp': '2025-10-12T14:30:00.000Z',
    'Content-Type': 'application/json'
  }
});

const data = await response.json();
python
import requests

response = requests.get(
    'https://sandbox.mara.boo/api-access/api/webhook-subscriptions',
    headers={
        'Authorization': 'HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY',
        'X-Origin': 'third-party-api',
        'X-Timestamp': '2025-10-12T14:30:00.000Z',
        'Content-Type': 'application/json'
    }
)

data = response.json()
go
package main

import (
    "net/http"
    "io/ioutil"
)

func main() {
    client := &http.Client{}
    req, _ := http.NewRequest("GET", "https://sandbox.mara.boo/api-access/api/webhook-subscriptions", nil)

    req.Header.Set("Authorization", "HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY")
    req.Header.Set("X-Origin", "third-party-api")
    req.Header.Set("X-Timestamp", "2025-10-12T14:30:00.000Z")
    req.Header.Set("Content-Type", "application/json")

    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := ioutil.ReadAll(resp.Body)
}
java
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://sandbox.mara.boo/api-access/api/webhook-subscriptions"))
    .header("Authorization", "HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY")
    .header("X-Origin", "third-party-api")
    .header("X-Timestamp", "2025-10-12T14:30:00.000Z")
    .header("Content-Type", "application/json")
    .GET()
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
csharp
using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
var request = new HttpRequestMessage(HttpMethod.Get, "https://sandbox.mara.boo/api-access/api/webhook-subscriptions");

request.Headers.Add("Authorization", "HMAC-SHA256 YOUR_PUBLIC_KEY:YOUR_PRIVATE_KEY");
request.Headers.Add("X-Origin", "third-party-api");
request.Headers.Add("X-Timestamp", "2025-10-12T14:30:00.000Z");
request.Content.Headers.ContentType = new MediaTypeHeaderValue("application/json");

var response = await client.SendAsync(request);
var content = await response.Content.ReadAsStringAsync();

Error Responses

Status CodeDescription
401Unauthorized - Invalid authentication
403Forbidden - Missing required headers
404Not Found - Resource doesn't exist
500Internal Server Error