# Read the webhook URL and the dates of the active secrets

`GET https://management.horeca-24.de/api/partner/v1/webhook`

Never answers the secrets themselves.

## Headers

- `Authorization` (string, required): Bearer $PARTNER_API_KEY

## Response

### 200 — The webhook configuration

- `url` (string or null, required)
- `configured` (boolean, required)
- `secrets` (array of object, required)
  The active secrets' dates; never the secrets
  - `createdAt` (string, required, format: date-time)
  - `expiresAt` (string, optional, format: date-time)
    Present for the previous secret after a rotation

## Errors

- `401`: `UNAUTHORIZED`: the key is missing, malformed, unknown, wrong, expired or revoked
- `403`: `CONNECTION_REVOKED`: the restaurant deleted the connection; stop sending

## Code example (cURL)

```sh
curl https://management.horeca-24.de/api/partner/v1/webhook \
  -H "Authorization: Bearer $PARTNER_API_KEY"
```

## Response 200 — Example

```json
{
  "url": "https://partner.example/hooks/horeca24",
  "configured": true,
  "secrets": [
    {
      "createdAt": "2026-10-15T09:00:00.000Z"
    }
  ]
}
```