# List webhook keys

List all inbound webhook signing keys for the organization.

Source: https://statusdashboard.com/docs/api/integrations/webhooks/inbound/keys/list

`GET /app/integrations/webhooks/inbound/keys`

Returns all webhook signing keys for the organization, along with the maximum number of keys allowed by the plan. The raw signing secret is never returned after creation.

Requires the **integrations** feature entitlement.

***

## Request
See [API Basics](/docs/api) for required headers.

This endpoint takes no request body or query parameters.

***

## Sample request
```bash
curl https://api.statusdashboard.com/app/integrations/webhooks/inbound/keys \
  -H "Authorization: Bearer bcf847abf5c6:def456"
```

## Sample response
**Status: `200 OK`**

```json
{
  "keys": [
    {
      "keyId": "wk_a1b2c3d4e5f6a7b8",
      "name": "CRM integration",
      "createdAt": "2026-03-20T10:00:00.000Z",
      "lastUsedAt": "2026-04-14T09:15:00.000Z"
    }
  ],
  "maxKeys": 5
}
```

`lastUsedAt` is omitted when the key has never been used.

***

## Response fields
| Field               | Type              | Description                                                                                                                                              |
| ------------------- | ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `keys`              | array             | Inbound webhook signing keys for the organization. The raw secret is never returned after [create](/docs/api/integrations/webhooks/inbound/keys/create). |
| `maxKeys`           | number            | Maximum keys allowed on your plan.                                                                                                                       |
| `keys[].keyId`      | string            | Public key identifier sent in inbound webhook requests.                                                                                                  |
| `keys[].name`       | string            | Human-readable label from create.                                                                                                                        |
| `keys[].createdAt`  | string            | ISO 8601 timestamp when the key was created.                                                                                                             |
| `keys[].lastUsedAt` | string \| omitted | ISO 8601 timestamp of the most recent authenticated ingest. Omitted when never used.                                                                     |

***

## Error responses
| Status | When                                                                  |
| ------ | --------------------------------------------------------------------- |
| `403`  | Insufficient permissions, or the integrations feature is not enabled. |