secretKey is included in the response — treat it with the same care as a password.
Request
GET /public/webhook/subscriptions
Headers
Must be
application/json.Your API Application Key.
Your User API Key.
Current UTC timestamp in RFC 7231 format (e.g.
Mon, 06 Apr 2026 00:22:19 GMT).HMAC-SHA256 signature of the canonical request, Base64-encoded.
Response
200 Success
Returns an array of subscription objects. An empty array is returned when no subscriptions exist.Unique numeric identifier of the subscription.
The HTTPS callback URL registered for this subscription.
Optional human-readable label for this subscription.
Whether the subscription is currently active. Disabled subscriptions will not receive event deliveries.
HMAC secret used to verify incoming webhook payloads for this subscription.
Array of event type strings this subscription is registered for.
Error Codes
| Code | Meaning |
|---|---|
| 401 | HMAC signature validation failed or credentials are invalid. |
| 402 | An active Portal.io subscription is required to use this endpoint. |
| 403 | Your user account does not have permission for this action. |