Skip to main content
GET
cURL
Use this to read an endpoint’s state before you change it, and afterwards to confirm the change took. For every endpoint on your account in one response, use Webhooks.

Parameters

Key response fields

Example

What it does not return

  • signing_secret. Store it from the response that created or rotated it, because no read returns it.
  • verification.token. Only Create a webhook and a url change through Update a webhook return one.
  • A deleted endpoint, or one another account owns. Both answer 404, the same answer as an id that never existed.
  • Delivery attempts. Read Webhook deliveries for this endpoint’s log.

Authorizations

Authorization
string
header
required

Legacy default or named integration API key, or OAuth 2.1 access token, in the Authorization header as Bearer oxi_sk_live_... or Bearer oxi_at_.... Default keys retain full access; integration keys are limited to their approved read, webhooks, export and usage scopes and expire within 90 days. All credentials share the owner's account limits. Data calls require an active Pro subscription and return live data. A 401 carries WWW-Authenticate: Bearer resource_metadata="https://api.0xinsider.com/.well-known/oauth-protected-resource" (RFC 6750 section 3, RFC 9728).

Headers

X-Query-Validation
enum<string>

Opt into strict query-name validation. The default is compatible: unknown names are ignored and reported in X-Query-Ignored. With strict, an unknown name returns 400 bad_request with error.reason unknown_query_parameter before the handler runs, including when its percent escape is incomplete.

Available options:
strict

Path Parameters

id
integer<int64>
required

Webhook endpoint id owned by the authenticated API key user.

Response

Webhook destination

object
string
required
Allowed value: "webhook"
data
object
required
meta
object
required