> ## Documentation Index
> Fetch the complete documentation index at: https://developers.redo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# inboundWebhooks

> List the store's inbound webhooks, newest first. No field reads a secret back. With `automations_read` alone, only `id` and `name` can be read.

**Required scopes:** [`developer_read`](https://developers.redo.com/docs/api-reference/v3/reference/scopes#scope-developer_read), [`automations_read`](https://developers.redo.com/docs/api-reference/v3/reference/scopes#scope-automations_read)

## Arguments

**after** `String`

Forward pagination cursor — returns inbound webhooks after it.

**before** `String`

Backward pagination cursor — returns inbound webhooks before it.

**first** `Int`

Forward pagination: returns the first N inbound webhooks (max 100, default 25). Use with `after`; mutually exclusive with `last`/`before`.

**last** `Int`

Backward pagination: returns the last N inbound webhooks (max 100, default 25). Use with `before`; mutually exclusive with `first`/`after`.

**orderBy** `[InboundWebhookSortKey](/docs/api-reference/v3/reference/developer/inbound-webhook-sort-key)`

Which key to sort by (defaults to the first key, newest-first). Combine with `reverse` to flip direction.

**reverse** `Boolean`

Reverses the sort direction selected by `orderBy` (or its default).

## Returns

**inboundWebhooks** `[InboundWebhookConnection!](/docs/api-reference/v3/pagination)` *required*

A paginated list of InboundWebhook items.

**fields**

**edges** `[\[InboundWebhookEdge!\]!](/docs/api-reference/v3/pagination)` *required*

The list of edges (each a node plus its pagination `cursor`).

**fields**

**cursor** `String!` *required*

Opaque cursor for this item; pass to `after`/`before` to page from here.

**node** `[InboundWebhook!](/docs/api-reference/v3/reference/developer/inbound-webhook)` *required*

The item at this edge.

**fields**

**createdAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook was created.

**dedupPath** `[String!]`

Field names from the body's root to a value that identifies each event; a repeat is accepted once. Null: Standard Webhooks uses `webhook-id`, other methods treat identical bodies as repeats.

**header** `String`

The header that carries the signature or the shared secret. Set only for HMAC and SHARED\_SECRET\_HEADER.

**hmacAlgorithm** `[InboundWebhookHmacAlgorithm](/docs/api-reference/v3/reference/developer/inbound-webhook-hmac-algorithm)`

The HMAC hash. Set only for HMAC.

**id** `ID!` *required*

The id of this inbound webhook. An inbound webhook trigger names it.

**lastRejectedAt** `[DateTime](/docs/api-reference/v3/reference/common/date-time)`

When a request was last rejected, recorded at most once a minute. Null when none has been.

**lastRejectionReason** `String`

Why the last rejected request was rejected.

**name** `String!` *required*

The inbound webhook's name, unique in the store.

**secretSet** `Boolean!` *required*

Whether a secret is stored. Requests are rejected until one is.

**signatureEncoding** `[InboundWebhookSignatureEncoding](/docs/api-reference/v3/reference/developer/inbound-webhook-signature-encoding)`

How the HMAC signature is written. Set only for HMAC.

**signaturePrefix** `String`

Text before the signature in its header, such as `sha256=`. Set only for HMAC.

**updatedAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook's name, settings, URL or secret last changed.

**url** `String!` *required*

The URL the sender posts to. Its last path segment identifies the endpoint; it doesn't authenticate.

**username** `String`

The basic auth username. Set only for BASIC\_AUTH.

**verificationMethod** `[InboundWebhookVerificationMethod!](/docs/api-reference/v3/reference/developer/inbound-webhook-verification-method)` *required*

How requests are verified.

**nodes** `[\[InboundWebhook!\]!](/docs/api-reference/v3/reference/developer/inbound-webhook)` *required*

The nodes in this page, without the edge/cursor wrapper — a convenience over `edges`.

**fields**

**createdAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook was created.

**dedupPath** `[String!]`

Field names from the body's root to a value that identifies each event; a repeat is accepted once. Null: Standard Webhooks uses `webhook-id`, other methods treat identical bodies as repeats.

**header** `String`

The header that carries the signature or the shared secret. Set only for HMAC and SHARED\_SECRET\_HEADER.

**hmacAlgorithm** `[InboundWebhookHmacAlgorithm](/docs/api-reference/v3/reference/developer/inbound-webhook-hmac-algorithm)`

The HMAC hash. Set only for HMAC.

**id** `ID!` *required*

The id of this inbound webhook. An inbound webhook trigger names it.

**lastRejectedAt** `[DateTime](/docs/api-reference/v3/reference/common/date-time)`

When a request was last rejected, recorded at most once a minute. Null when none has been.

**lastRejectionReason** `String`

Why the last rejected request was rejected.

**name** `String!` *required*

The inbound webhook's name, unique in the store.

**secretSet** `Boolean!` *required*

Whether a secret is stored. Requests are rejected until one is.

**signatureEncoding** `[InboundWebhookSignatureEncoding](/docs/api-reference/v3/reference/developer/inbound-webhook-signature-encoding)`

How the HMAC signature is written. Set only for HMAC.

**signaturePrefix** `String`

Text before the signature in its header, such as `sha256=`. Set only for HMAC.

**updatedAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook's name, settings, URL or secret last changed.

**url** `String!` *required*

The URL the sender posts to. Its last path segment identifies the endpoint; it doesn't authenticate.

**username** `String`

The basic auth username. Set only for BASIC\_AUTH.

**verificationMethod** `[InboundWebhookVerificationMethod!](/docs/api-reference/v3/reference/developer/inbound-webhook-verification-method)` *required*

How requests are verified.

**pageInfo** `[PageInfo!](/docs/api-reference/v3/pagination)` *required*

Pagination metadata for the current page.

**fields**

**endCursor** `String`

Cursor of the last edge in this page; pass to `after` to page forward.

**hasNextPage** `Boolean!` *required*

Whether more items exist after this page (drives forward pagination with `first`/`after`).

**hasPreviousPage** `Boolean!` *required*

Whether more items exist before this page (drives backward pagination with `last`/`before`).

**startCursor** `String`

Cursor of the first edge in this page; pass to `before` to page backward.

## Example

```graphql theme={null}
query {
  inboundWebhooks(after: "...", before: "...", first: 10, last: 10, orderBy: CREATED_AT, reverse: true) {
    nodes {
      createdAt
      dedupPath
      header
      hmacAlgorithm
      id
      lastRejectedAt
      lastRejectionReason
      name
      # ...
    }
    pageInfo { hasNextPage endCursor }
  }
}
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.