# List all endpoints

> List every webhook endpoint on the account.

`GET https://inboundr.net/api/v1/endpoints`

Returns the caller's [endpoints](/concepts/endpoints). Signing secrets are
**redacted** — they're only shown once, at creation.

<ResponseExample>
```json 200
{
  "data": [
    {
      "id": "ep_123",
      "name": "Production handler",
      "url": "https://api.example.com/hooks/inbound",
      "headers": { "X-Team": "growth" },
      "timeoutSeconds": 10,
      "maxAttempts": 5,
      "active": true,
      "createdAt": "2026-07-20T10:00:00.000Z"
    }
  ]
}
```
</ResponseExample>