healthcare.dev docs
API referenceWebhooks

List webhooks

GET /v1/webhooks

GET https://api.healthcare.dev/v1/webhooks

Pro plan and up (403 plan-upgrade-required below Pro); never counts as a billable call. The account's webhooks, newest first, without their secrets. A webhook turned off after failing for a day has status: disabled and disabled_reason: failing; re-enable it with PATCH.

Requires an API key: Authorization: Bearer hdev_live_.... See Authentication.

Examples

curl

curl "https://api.healthcare.dev/v1/webhooks" \
  -H "Authorization: Bearer $HDEV_API_KEY"

TypeScript

const res = await fetch("https://api.healthcare.dev/v1/webhooks", {
  headers: { Authorization: `Bearer ${process.env.HDEV_API_KEY}` },
});
const { data, meta } = await res.json();

Python

import os
import requests

res = requests.get("https://api.healthcare.dev/v1/webhooks", headers={"Authorization": f"Bearer {os.environ['HDEV_API_KEY']}"})
body = res.json()

Try it

GEThttps://api.healthcare.dev/v1/webhooks
Get a free key
Copy as curl
curl "https://api.healthcare.dev/v1/webhooks" \
  -H "Authorization: Bearer $HDEV_API_KEY"

Response

Webhooks

{
  "data": [
    {
      "id": "string",
      "url": "string",
      "description": "string",
      "events": [
        "dataset.released"
      ],
      "datasets": [
        "string"
      ],
      "subjects": [
        "string"
      ],
      "status": "active",
      "disabled_reason": "failing",
      "disabled_at": "string",
      "consecutive_failures": 1,
      "secret_hint": "string",
      "created_at": "string"
    }
  ],
  "meta": {
    "source": "cms-icd10",
    "data_version": "2026.1",
    "retrieved_at": "2026-10-24T12:00:00Z",
    "license": "Public domain (CMS). Reference data, not medical advice."
  },
  "links": {
    "self": "/v1/webhooks",
    "next": "/v1/webhooks?cursor=eyJrIjoiRTExLjkifQ"
  }
}

Fields

FieldTypeAlways presentDescription
idstringyes
urlstringyes
descriptionstring | nullyes
eventsWebhookEventType[]yes
datasetsstring[]yes
subjectsstring[]yesAs matched: normalized to record keys
status"active" | "disabled"yes
disabled_reason"failing" | "manual" | nullyesfailing: turned off after repeated failed deliveries; manual: by you
disabled_atstring | nullyes
consecutive_failuresintegeryesFailed attempts since the last success
secret_hintstringyesThe secret's last characters, to tell secrets apart
created_atstringyes

Errors

Errors are application/problem+json (RFC 9457). Branch on type, not on title. See Errors.

StatustypeWhen
400invalid-requestA parameter or the body failed validation; errors lists each field.
401unauthorizedMissing, malformed or revoked API key.
403plan-upgrade-requiredThe plan doesn't include this feature; required_plan names the plan that does.
404not-foundNo record with that id (retired records are still returned).
429rate-limited / quota-exceededToo many requests per second (retry after Retry-After), or the monthly quota is used up.

On this page