> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blujay.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a webhook subscription

> Returns one webhook subscription. The signing secret isn't included.



## OpenAPI

````yaml /api-reference/openapi.yaml get /v1/webhook-subscriptions/{subscription_id}
openapi: 3.1.0
info:
  title: Blujay API
  version: 1.0.0
  description: >-
    The Blujay API lets you send and receive iMessage, RCS and SMS messages from
    your

    Blujay phone numbers, manage contacts, and receive real-time webhooks.


    Every response uses the same JSON envelope and carries a `trace_id` you can
    share

    with support. Authenticate with your workspace API key.
servers:
  - url: https://api.blujay.io
    description: Production
security:
  - PublicApiKey: []
tags:
  - name: Auth
    description: Check which workspace and credential a request is using.
  - name: Chats
    description: >-
      Direct and group conversations between your Blujay numbers and your
      contacts.
  - name: Messages
    description: Send, read, edit, unsend and retry messages.
  - name: Phone Numbers
    description: >-
      Your Blujay numbers, whether each can send right now, and their live
      sending limits.
  - name: Capability
    description: >-
      Check whether a phone number can be reached by iMessage, RCS or SMS before
      you send.
  - name: Contacts
    description: Create, find, update, tag, assign and opt out contacts.
  - name: vCards
    description: >-
      Saved contact cards that you can send in a message. Recipients get a
      native contact card over iMessage, SMS or RCS.
  - name: Team Members
    description: People in your workspace you can assign contacts to.
  - name: Workflows
    description: Enroll contacts in workflows you start manually.
  - name: Attachments
    description: >-
      Upload files once and reuse them in messages, or download files from
      messages.
  - name: Webhooks
    description: Subscribe to events, inspect delivery attempts and verify signatures.
paths:
  /v1/webhook-subscriptions/{subscription_id}:
    get:
      tags:
        - Webhooks
      summary: Get a webhook subscription
      description: Returns one webhook subscription. The signing secret isn't included.
      operationId: getPublicWebhookSubscription
      parameters:
        - $ref: '#/components/parameters/WebhookSubscriptionId'
      responses:
        '200':
          description: The subscription.
          headers:
            X-Trace-ID:
              $ref: '#/components/headers/XTraceID'
          content:
            application/json:
              schema:
                allOf:
                  - $ref: '#/components/schemas/SuccessEnvelope'
                  - type: object
                    required:
                      - data
                    properties:
                      data:
                        $ref: '#/components/schemas/PublicWebhookSubscription'
        '404':
          $ref: '#/components/responses/NotFound'
      security:
        - PublicApiKey: []
components:
  parameters:
    WebhookSubscriptionId:
      name: subscription_id
      in: path
      required: true
      schema:
        $ref: '#/components/schemas/WebhookSubscriptionId'
  headers:
    XTraceID:
      description: >-
        Unique ID for this request. It matches `trace_id` in the body. Include
        it when you contact Blujay support.
      schema:
        $ref: '#/components/schemas/TraceId'
  schemas:
    SuccessEnvelope:
      type: object
      description: Wraps every successful response. The result is in `data`.
      required:
        - status
        - trace_id
        - timestamp
      properties:
        status:
          type: string
          enum:
            - success
        trace_id:
          $ref: '#/components/schemas/TraceId'
        timestamp:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
        client_request_id:
          type: string
          description: >-
            Your `X-Request-ID` header value, echoed back when you send one. Not
            included on the send responses (`POST /v1/chats`, `POST
            /v1/chats/{chat_id}/messages`, `POST
            /v1/messages/{message_id}/retry`); keep your own mapping from your
            request ID to the returned message ID there.
    PublicWebhookSubscription:
      type: object
      additionalProperties: false
      required:
        - subscription_id
        - url
        - event_types
        - webhook_version
        - status
        - phone_number_filter
        - signing_secret_hint
        - created_at
        - updated_at
      properties:
        subscription_id:
          $ref: '#/components/schemas/WebhookSubscriptionId'
        url:
          type: string
          examples:
            - https://example.com/webhooks/blujay
          format: uri
        event_types:
          type: array
          items:
            $ref: '#/components/schemas/WebhookEventType'
        phone_number_filter:
          $ref: '#/components/schemas/WebhookPhoneNumberFilter'
        webhook_version:
          $ref: '#/components/schemas/WebhookPayloadVersion'
        status:
          $ref: '#/components/schemas/PublicWebhookSubscriptionStatus'
        signing_secret_hint:
          type: string
          examples:
            - Y3OA==
          minLength: 6
          maxLength: 6
          description: Last six characters of the signing secret.
        created_at:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
        updated_at:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
    WebhookSubscriptionId:
      type: string
      examples:
        - whsub_abc123
      pattern: ^whsub_[A-Za-z0-9_-]+$
    TraceId:
      type: string
      examples:
        - trc_8f2a1c0e4b7d
      pattern: ^trc_[A-Za-z0-9_-]+$
    WebhookEventType:
      type: string
      description: >-
        Every event type that can appear on a subscription or in a webhook. Some
        types are recognized only so older subscriptions keep working and may
        never be sent. You can add only the types in
        `WebhookSubscribableEventType`.
      enum:
        - message.accepted
        - message.sent
        - message.delivered
        - message.read
        - message.failed
        - message.received
        - reaction.added
        - reaction.removed
        - participant.added
        - participant.removed
        - chat.group_name_updated
        - phone_number.status_updated
        - contact.tag_added
        - contact.assigned
        - chat.typing_indicator.started
        - chat.typing_indicator.stopped
        - message.edited
        - message.unsent
    WebhookPhoneNumberFilter:
      description: >-
        Which of your numbers this subscription gets events for. `all` covers
        every number, including numbers you add later; `selected` covers only
        the `phone_number_ids` you list. Contact events are always sent for the
        whole workspace. Defaults to `all` on create; left unchanged on update
        if you omit it.
      oneOf:
        - type: object
          additionalProperties: false
          required:
            - mode
          properties:
            mode:
              type: string
              enum:
                - all
        - type: object
          additionalProperties: false
          required:
            - mode
            - phone_number_ids
          properties:
            mode:
              type: string
              enum:
                - selected
            phone_number_ids:
              type: array
              minItems: 1
              maxItems: 100
              uniqueItems: true
              items:
                type: string
                examples:
                  - phone_abc123
                pattern: ^phone_[A-Za-z0-9_-]+$
    WebhookPayloadVersion:
      type: string
      enum:
        - '2026-06-14'
        - '2026-08-01'
        - '2026-08-20'
        - '2026-09-02'
        - '2026-10-03'
      description: >
        The payload version for a subscription's events.

        - `2026-08-20` reports the service you asked for as `requested_service`
        and the service actually used as `service`.

        - `2026-09-02` adds message `parts`.

        - `2026-10-03` adds iMessage group typing with a `participants`
        snapshot, and `reply_to` on message events.


        Earlier versions keep their original payload shapes and never receive
        group typing. Each event uses the subscription's version at the time the
        event was created, so changing the version affects only later events.
    PublicWebhookSubscriptionStatus:
      type: string
      enum:
        - active
        - disabled
    ErrorEnvelope:
      type: object
      description: >-
        Wraps every error response. Branch on `error.code`, and include
        `trace_id` when you contact support.
      required:
        - status
        - error
        - trace_id
        - timestamp
      properties:
        status:
          const: error
        error:
          $ref: '#/components/schemas/PublicError'
        trace_id:
          $ref: '#/components/schemas/TraceId'
        timestamp:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
        client_request_id:
          type: string
          description: Your `X-Request-ID` header value, echoed back when you send one.
    PublicError:
      type: object
      required:
        - code
        - message
        - type
        - http_status
        - retryable
        - doc_url
        - details
      properties:
        code:
          type: string
          description: Stable, machine-readable error code. Branch on this value.
          examples:
            - RATE_LIMIT_EXCEEDED
            - QUEUE_UNAVAILABLE
            - FEATURE_NOT_ENABLED
        message:
          type: string
          description: Human-readable explanation. It can change, so don't parse it.
        type:
          type: string
          description: Broad error category.
          examples:
            - validation
            - auth
            - idempotency
            - rate_limit
            - queue
            - feature_gate
        http_status:
          type: integer
          description: The HTTP status code of the response.
          enum:
            - 400
            - 401
            - 403
            - 404
            - 409
            - 413
            - 415
            - 422
            - 429
            - 500
            - 502
            - 503
        retryable:
          type: boolean
          description: Whether sending the same request again later can succeed.
        doc_url:
          type: string
          format: uri
          description: Link to documentation for this error code.
        details:
          type: array
          description: >-
            Extra structured context, such as the fields that failed validation
            or the limit you hit.
          items:
            type: object
            additionalProperties: true
        retry_after:
          type: integer
          minimum: 1
          description: >-
            Seconds to wait before retrying. Also sent as the `Retry-After`
            header.
        reset_at:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
          description: When the limit you hit resets.
  responses:
    NotFound:
      description: The resource doesn't exist or isn't in your workspace.
      headers:
        X-Trace-ID:
          $ref: '#/components/headers/XTraceID'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorEnvelope'
  securitySchemes:
    PublicApiKey:
      type: http
      scheme: bearer
      bearerFormat: blu_...
      description: >
        Your workspace API key, sent as `Authorization: Bearer blu_...`.
        Workspace admins can find it in the Blujay app under **API**.


        An API key has full access to your workspace and works on every
        endpoint. There is no test mode: every key sends real messages and
        changes real data, so keep it secret and use it only from your server.


        Each API key can make 600 read requests and 120 write requests per
        minute, plus 60 attachment requests per minute. Over a limit you get
        `429 RATE_LIMIT_EXCEEDED` with `Retry-After`.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.