GET

List webhook endpoints

https://www.helprange.com/api/v2/webhook-endpoints

The team's webhook endpoint – a team has at most one, so the list has 0 or 1 items. Scope webhooks:manage; team administrators only (403 otherwise); live keys only – test keys get 400 livemode_required (the sandbox sends no webhooks).

Plans: Pro, Max, Unlimited, Deal Room Pass, trial. Auth: Authorization: Bearer hr_live_… (team key), X-API-Key, Authorization: Api-Key <key> or an OAuth Bearer token. Scope: webhooks:manage. Operation id: listWebhookEndpoints

Example request

curl -X GET https://www.helprange.com/api/v2/webhook-endpoints \
  -H "X-API-Key: $HELPRANGE_API_KEY"

The samples read the key from the HELPRANGE_API_KEY environment variable.

Responses

StatusDescription
200OK
401Missing or invalid API key / OAuth token. Team keys: code invalid_key, key_revoked, key_expired or key_owner_removed.
402Your plan does not include the REST API (the Free plan) or this feature (e.g. NDA needs Max).
403The team API key lacks the scope this endpoint needs.
405Wrong HTTP method for this endpoint.
429A usage limit was reached – wait Retry-After seconds.
Example response · 200
{
  "webhook_endpoints": [
    {
      "id": 3,
      "url": "https://hooks.example.com/helprange",
      "enabled": true,
      "disabled_reason": null,
      "disabled_at": null,
      "consecutive_failures": 0,
      "last_success_at": "2026-11-15T09:12:04+00:00",
      "secret_rotated_at": null,
      "previous_secret_expires_at": null,
      "created_at": "2026-11-15T09:00:00+00:00",
      "events": [
        "document.acknowledged",
        "document.opened",
        "file_request.uploaded",
        "nda.accepted",
        "offer.accepted",
        "offer.contact_requested",
        "offer.declined",
        "room.access_requested"
      ]
    }
  ]
}

Try it

Uses your real account. The request goes from your browser straight to www.helprange.com with your API key and acts as you. The key stays in this page (in this tab's session storage only if you tick the box), is never put in a URL and is not sent to analytics. Do not paste a key on a shared computer.