Get webhook configuration

GET

/v1/webhook

curl --request GET \
  --url https://api.sulpayments.ch/v1/webhook \
  --header 'Authorization: Bearer <token>'

• Production
• Sandbox

Returns the authenticated merchant's settlement-notification webhook configuration. The signing secret is never returned — only whether one is set.

Authorizations

• api_key

Responses

200

The merchant's webhook configuration

Media typeapplication/json

A merchant's own webhook configuration, as it sees it. The secret is never returned — only whether one is set.

object

webhook_secret_set

required

boolean

webhook_url

string | null

Example^generated

{
  "webhook_secret_set": true,
  "webhook_url": "example"
}

401

Missing or invalid API key

Media typeapplication/json

The error envelope every 4xx/5xx response uses. The error.code is machine-stable across locales; error.message is localized via the request's Accept-Language (en by default). error.fields is present only for per-field validation failures.

object

error

required

The body of an [ErrorEnvelope].

object

code

required

Machine-stable error code (stable across locales).

string

Allowed values: invalid_credentials unauthenticated origin_not_allowed challenge_failed locked invalid_link invalid_code otp_enforced no_merchant no_partner not_found invalid_body internal_error provider_unavailable provider_call_failed quote_refused conversion_refused payout_refused payout_wallet_out_of_gas unexpected_failure provider_still_processing database_grant_missing rail_inactive fx_accounts_missing sender_not_registered payout_outcome_unknown conversion_outcome_unknown validation_failed webhook_endpoint_not_configured access_token_missing access_token_malformed access_token_invalid access_verification_unavailable conflict admin_validation_failed forbidden issuance_not_enabled merchant_identity_incomplete issuance_quota_exceeded issuance_rate_limited end_user_reference_exists currency_not_enabled currency_not_supported required invalid_url unsafe_url unresolvable_host

fields

Per-field validation errors, present only for validation_failed.

Array<object> | null

One field-level validation failure inside [ApiError::fields].

object

code

required

The machine-stable reason code for this field.

string

Allowed values: invalid_credentials unauthenticated origin_not_allowed challenge_failed locked invalid_link invalid_code otp_enforced no_merchant no_partner not_found invalid_body internal_error provider_unavailable provider_call_failed quote_refused conversion_refused payout_refused payout_wallet_out_of_gas unexpected_failure provider_still_processing database_grant_missing rail_inactive fx_accounts_missing sender_not_registered payout_outcome_unknown conversion_outcome_unknown validation_failed webhook_endpoint_not_configured access_token_missing access_token_malformed access_token_invalid access_verification_unavailable conflict admin_validation_failed forbidden issuance_not_enabled merchant_identity_incomplete issuance_quota_exceeded issuance_rate_limited end_user_reference_exists currency_not_enabled currency_not_supported required invalid_url unsafe_url unresolvable_host

field

required

The request field the error applies to (e.g. webhook_url).

string

message

required

Human-readable message, localized by Accept-Language.

string

Example

{
  "error": {
    "code": "invalid_credentials",
    "fields": [
      {
        "code": "invalid_credentials"
      }
    ],
    "message": "One or more fields are invalid."
  }
}