# The callback signing secret

> GET /webhooks/callback-secret

Source: https://mockflow.com/developers/reference/webhooks/get-callback-secret

**GET** `https://api.mockflow.com/v1/webhooks/callback-secret`  
Scopes: `boards:read`

**curl**

```bash
curl https://api.mockflow.com/v1/webhooks/callback-secret \
  -H "Authorization: Bearer $MOCKFLOW_API_KEY"
```

**JavaScript**

```javascript
const response = await fetch("https://api.mockflow.com/v1/webhooks/callback-secret", {
  method: "GET",
  headers: {
    Authorization: `Bearer ${process.env.MOCKFLOW_API_KEY}`
  }
});

const data = await response.json();
```

**Python**

```python
import os, requests

response = requests.get(
    "https://api.mockflow.com/v1/webhooks/callback-secret",
    headers={"Authorization": f"Bearer {os.environ['MOCKFLOW_API_KEY']}"},
)

response.raise_for_status()
data = response.json()
```

**200**

```json
{
  "secret": "string"
}
```

**429**

```json
{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests.",
    "docsUrl": "https://mockflow.com/developers/concepts/errors#rate_limited"
  },
  "requestId": "req_45d49816999bac40"
}
```

The workspace's secret for verifying requests to a callbackUrl. Made on first use.

### Authorization

- `Authorization` (string, required): `Bearer <key>`. The key needs `boards:read` scope. Create and manage keys in the [developer console](/developers/console/), or use an [OAuth app](/developers/concepts/oauth-apps) to act for other people; what each scope unlocks is on the [scopes page](/developers/concepts/scopes).

### Response

- `secret` (string)

### Errors

- 429 `rate_limited`: Too many requests.