> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blujay.io/llms.txt
> Use this file to discover all available pages before exploring further.

# List webhook subscriptions

> Returns your workspace's webhook subscriptions. Signing secrets aren't included; each subscription shows only `signing_secret_hint`.



## OpenAPI

````yaml /api-reference/openapi.yaml get /v1/webhook-subscriptions
openapi: 3.1.0
info:
  title: Blujay API
  version: 1.0.0
  description: >-
    The Blujay API lets you send and receive iMessage, RCS and SMS messages from
    your

    Blujay phone numbers, manage contacts, and receive real-time webhooks.


    Every response uses the same JSON envelope and carries a `trace_id` you can
    share

    with support. Authenticate with your workspace API key.
servers:
  - url: https://api.blujay.io
    description: Production
security:
  - PublicApiKey: []
tags:
  - name: Auth
    description: Check which workspace and credential a request is using.
  - name: Chats
    description: >-
      Direct and group conversations between your Blujay numbers and your
      contacts.
  - name: Messages
    description: Send, read, edit, unsend and retry messages.
  - name: Phone Numbers
    description: >-
      Your Blujay numbers, whether each can send right now, and their live
      sending limits.
  - name: Capability
    description: >-
      Check whether a phone number can be reached by iMessage, RCS or SMS before
      you send.
  - name: Contacts
    description: Create, find, update, tag, assign and opt out contacts.
  - name: vCards
    description: >-
      Saved contact cards that you can send in a message. Recipients get a
      native contact card over iMessage, SMS or RCS.
  - name: Team Members
    description: People in your workspace you can assign contacts to.
  - name: Workflows
    description: Enroll contacts in workflows you start manually.
  - name: Attachments
    description: >-
      Upload files once and reuse them in messages, or download files from
      messages.
  - name: Webhooks
    description: Subscribe to events, inspect delivery attempts and verify signatures.
paths:
  /v1/webhook-subscriptions:
    get:
      tags:
        - Webhooks
      summary: List webhook subscriptions
      description: >-
        Returns your workspace's webhook subscriptions. Signing secrets aren't
        included; each subscription shows only `signing_secret_hint`.
      operationId: listPublicWebhookSubscriptions
      parameters:
        - $ref: '#/components/parameters/Limit'
        - $ref: '#/components/parameters/Cursor'
      responses:
        '200':
          description: Your webhook subscriptions.
          headers:
            X-Trace-ID:
              $ref: '#/components/headers/XTraceID'
          content:
            application/json:
              schema:
                allOf:
                  - $ref: '#/components/schemas/SuccessEnvelope'
                  - type: object
                    required:
                      - data
                    properties:
                      data:
                        $ref: '#/components/schemas/PublicWebhookSubscriptionList'
      security:
        - PublicApiKey: []
components:
  parameters:
    Limit:
      name: limit
      in: query
      description: Maximum number of items to return.
      schema:
        type: integer
        minimum: 1
        maximum: 100
        default: 25
    Cursor:
      name: cursor
      in: query
      description: >-
        The `next_cursor` value from the previous page. Leave it out to get the
        first page.
      schema:
        type: string
  headers:
    XTraceID:
      description: >-
        Unique ID for this request. It matches `trace_id` in the body. Include
        it when you contact Blujay support.
      schema:
        $ref: '#/components/schemas/TraceId'
  schemas:
    SuccessEnvelope:
      type: object
      description: Wraps every successful response. The result is in `data`.
      required:
        - status
        - trace_id
        - timestamp
      properties:
        status:
          type: string
          enum:
            - success
        trace_id:
          $ref: '#/components/schemas/TraceId'
        timestamp:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
        client_request_id:
          type: string
          description: >-
            Your `X-Request-ID` header value, echoed back when you send one. Not
            included on the send responses (`POST /v1/chats`, `POST
            /v1/chats/{chat_id}/messages`, `POST
            /v1/messages/{message_id}/retry`); keep your own mapping from your
            request ID to the returned message ID there.
    PublicWebhookSubscriptionList:
      type: object
      additionalProperties: false
      required:
        - data
        - has_more
        - limit
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/PublicWebhookSubscription'
        next_cursor:
          type: string
          examples:
            - AbC9xQ2nRk7vT1mZ
        has_more:
          type: boolean
        limit:
          type: integer
          examples:
            - 25
    TraceId:
      type: string
      examples:
        - trc_8f2a1c0e4b7d
      pattern: ^trc_[A-Za-z0-9_-]+$
    PublicWebhookSubscription:
      type: object
      additionalProperties: false
      required:
        - subscription_id
        - url
        - event_types
        - webhook_version
        - status
        - phone_number_filter
        - signing_secret_hint
        - created_at
        - updated_at
      properties:
        subscription_id:
          $ref: '#/components/schemas/WebhookSubscriptionId'
        url:
          type: string
          examples:
            - https://example.com/webhooks/blujay
          format: uri
        event_types:
          type: array
          items:
            $ref: '#/components/schemas/WebhookEventType'
        phone_number_filter:
          $ref: '#/components/schemas/WebhookPhoneNumberFilter'
        webhook_version:
          $ref: '#/components/schemas/WebhookPayloadVersion'
        status:
          $ref: '#/components/schemas/PublicWebhookSubscriptionStatus'
        signing_secret_hint:
          type: string
          examples:
            - Y3OA==
          minLength: 6
          maxLength: 6
          description: Last six characters of the signing secret.
        created_at:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
        updated_at:
          type: string
          examples:
            - '2026-10-14T17:01:00.000Z'
          format: date-time
    WebhookSubscriptionId:
      type: string
      examples:
        - whsub_abc123
      pattern: ^whsub_[A-Za-z0-9_-]+$
    WebhookEventType:
      type: string
      description: >-
        Every event type that can appear on a subscription or in a webhook. Some
        types are recognized only so older subscriptions keep working and may
        never be sent. You can add only the types in
        `WebhookSubscribableEventType`.
      enum:
        - message.accepted
        - message.sent
        - message.delivered
        - message.read
        - message.failed
        - message.received
        - reaction.added
        - reaction.removed
        - participant.added
        - participant.removed
        - chat.group_name_updated
        - phone_number.status_updated
        - contact.tag_added
        - contact.assigned
        - chat.typing_indicator.started
        - chat.typing_indicator.stopped
        - message.edited
        - message.unsent
    WebhookPhoneNumberFilter:
      description: >-
        Which of your numbers this subscription gets events for. `all` covers
        every number, including numbers you add later; `selected` covers only
        the `phone_number_ids` you list. Contact events are always sent for the
        whole workspace. Defaults to `all` on create; left unchanged on update
        if you omit it.
      oneOf:
        - type: object
          additionalProperties: false
          required:
            - mode
          properties:
            mode:
              type: string
              enum:
                - all
        - type: object
          additionalProperties: false
          required:
            - mode
            - phone_number_ids
          properties:
            mode:
              type: string
              enum:
                - selected
            phone_number_ids:
              type: array
              minItems: 1
              maxItems: 100
              uniqueItems: true
              items:
                type: string
                examples:
                  - phone_abc123
                pattern: ^phone_[A-Za-z0-9_-]+$
    WebhookPayloadVersion:
      type: string
      enum:
        - '2026-06-14'
        - '2026-08-01'
        - '2026-08-20'
        - '2026-09-02'
        - '2026-10-03'
      description: >
        The payload version for a subscription's events.

        - `2026-08-20` reports the service you asked for as `requested_service`
        and the service actually used as `service`.

        - `2026-09-02` adds message `parts`.

        - `2026-10-03` adds iMessage group typing with a `participants`
        snapshot, and `reply_to` on message events.


        Earlier versions keep their original payload shapes and never receive
        group typing. Each event uses the subscription's version at the time the
        event was created, so changing the version affects only later events.
    PublicWebhookSubscriptionStatus:
      type: string
      enum:
        - active
        - disabled
  securitySchemes:
    PublicApiKey:
      type: http
      scheme: bearer
      bearerFormat: blu_...
      description: >
        Your workspace API key, sent as `Authorization: Bearer blu_...`.
        Workspace admins can find it in the Blujay app under **API**.


        An API key has full access to your workspace and works on every
        endpoint. There is no test mode: every key sends real messages and
        changes real data, so keep it secret and use it only from your server.


        Each API key can make 600 read requests and 120 write requests per
        minute, plus 60 attachment requests per minute. Over a limit you get
        `429 RATE_LIMIT_EXCEEDED` with `Retry-After`.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.