Horeca24 Partner API › Connection

Read the webhook URL and the dates of the active secrets

GEThttps://management.horeca-24.de/api/partner/v1/webhook

Never answers the secrets themselves.

Headers

AuthorizationstringRequired

Bearer pk_<connectionId>.<keyId>.<secret>

The connection's API key, from the restaurant's till. Treat it as one opaque string. 401 UNAUTHORIZED for a missing, wrong, expired or revoked key; 403 CONNECTION_REVOKED for the key of a deleted connection. After a rotation by the restaurant, the previous key keeps working for 24 hours.

Response

200The webhook configuration

urlstring or nullRequired

configuredbooleanRequired

secretsarray of objectRequired

The active secrets' dates; never the secrets

Show child attributesHide child attributes

createdAtstringRequiredformat: date-time

expiresAtstringOptionalformat: date-time

Present for the previous secret after a rotation

Errors

objectErrorBody

401

UNAUTHORIZED: the key is missing, malformed, unknown, wrong, expired or revoked

403

CONNECTION_REVOKED: the restaurant deleted the connection; stop sending

GET/webhook

cURL

curl https://management.horeca-24.de/api/partner/v1/webhook \
  -H "Authorization: Bearer $PARTNER_API_KEY"

Python

import os
import requests

url = "https://management.horeca-24.de/api/partner/v1/webhook"

headers = {
    "Authorization": "Bearer " + os.environ["PARTNER_API_KEY"],
}

response = requests.get(url, headers=headers)

print(response.status_code)
print(response.text)

JavaScript

const response = await fetch("https://management.horeca-24.de/api/partner/v1/webhook", {
  method: "GET",
  headers: {
    "Authorization": "Bearer " + process.env.PARTNER_API_KEY,
  },
});

const data = await response.text();
console.log(response.status, data);

PHP

<?php
$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://management.horeca-24.de/api/partner/v1/webhook',
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('PARTNER_API_KEY'),
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Try it

ServerAuthorizationNever stored, never sent to us.

Response

200

200The webhook configuration

{
  "url": "https://partner.example/hooks/horeca24",
  "configured": true,
  "secrets": [
    {
      "createdAt": "2026-10-15T09:00:00.000Z"
    }
  ]
}

401

401UNAUTHORIZED: the key is missing, malformed, unknown, wrong, expired or revoked

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "string",
    "path": "string",
    "details": null,
    "requestId": "string"
  }
}

403

403CONNECTION_REVOKED: the restaurant deleted the connection; stop sending

{
  "error": {
    "code": "CONNECTION_REVOKED",
    "message": "string",
    "path": "string",
    "details": null,
    "requestId": "string"
  }
}