# Forbidden Error when getting list of webhooks in sandbox

**URL:** https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412
**Category:** Developer Discussion
**Created:** [April 30, 2025, 10:33am UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412 "2025-04-30T10:33:41Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![george.monroyo](https://avatars.discourse-cdn.com/v4/letter/g/e9a140/32.png) [@george.monroyo](https://community.fireblocks.com/u/george.monroyo)
#### Post date: [April 30, 2025, 10:33am UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/1 "2025-04-30T10:33:41Z")

</div>

I am trying to get list of webhooks using this endpoint  
[Get] /v1/webhooks

I set the ff. headers:  
X-API-KEY  
Authorization

But I am getting forbidden error. Is this endpoint available in sandbox?

---

<div class="post-metadata">

### Author: ![Mohammed](https://sea1.discourse-cdn.com/flex015/user_avatar/community.fireblocks.com/mohammed/32/511_2.png) [@Mohammed](https://community.fireblocks.com/u/Mohammed)
#### Post date: [May 7, 2025, 4:59pm UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/2 "2025-05-07T16:59:55Z")

</div>

Hi @george.monroyo

This endpoint should be available for sandbox environments, did you ensure you have your secret included like so?:

1. `fireblocksApiKey`: This is the API key you downloaded from the **Users** tab in Fireblocks Console.
2. `fireblocksSecretKey`: This is the `fireblocks_secret.key` file you created in the [Quickstart Guide](https://developers.fireblocks.com/docs/quickstart).

If you are using Postman or custom API client this might be helpful [Postman Guide](https://developers.fireblocks.com/reference/explore-postman-collection)

---

<div class="post-metadata">

### Author: ![george.monroyo](https://avatars.discourse-cdn.com/v4/letter/g/e9a140/32.png) [@george.monroyo](https://community.fireblocks.com/u/george.monroyo)
#### Post date: [May 7, 2025, 5:15pm UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/3 "2025-05-07T17:15:55Z")

</div>

Hi @Mohammed,

I included in the header the ff:

req.Header.Set(“Authorization”, "Bearer "+token)  
req.Header.Add(“X-API-KEY”, s.APIKey)

Token is based on the sample code, using this, I am able to create a vault account and wallet address. but the endpoint for webhook has error

---

<div class="post-metadata">

### Author: ![Mohammed](https://sea1.discourse-cdn.com/flex015/user_avatar/community.fireblocks.com/mohammed/32/511_2.png) [@Mohammed](https://community.fireblocks.com/u/Mohammed)
#### Post date: [May 7, 2025, 7:38pm UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/4 "2025-05-07T19:38:17Z")

</div>

I see the issue,

If you take a look here, V1 webhooks only has a resend endpoint

> **[Resend failed webhooks](https://developers.fireblocks.com/reference/resendwebhooks)**
>
> Resends all failed webhook notifications. Learn more about Fireblocks Webhooks in the following guide . Endpoint Permission: Admin, Non-Signing Admin, Signer, Approver, Editor.

What you are trying to access is our Beta V2 webhook(GET /v1/webhook; keep in mind we use /v1/ for all our API endpoints as a base URL) which we would need to enable for you. What is your sandbox workspace name?

---

<div class="post-metadata">

### Author: ![george.monroyo](https://avatars.discourse-cdn.com/v4/letter/g/e9a140/32.png) [@george.monroyo](https://community.fireblocks.com/u/george.monroyo)
#### Post date: [May 7, 2025, 9:41pm UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/5 "2025-05-07T21:41:23Z")

</div>

Hi @Mohammed

is the workspace name?

![image](https://us1.discourse-cdn.com/flex015/uploads/fireblocks/original/1X/fcc0be437cab8498c39b952e2fad53472df523d8.png)

---

<div class="post-metadata">

### Author: ![tester\_58](https://avatars.discourse-cdn.com/v4/letter/t/9de053/32.png) [@tester\_58](https://community.fireblocks.com/u/tester_58)
#### Post date: [May 10, 2025, 1:45pm UTC](https://community.fireblocks.com/t/forbidden-error-when-getting-list-of-webhooks-in-sandbox/2412/6 "2025-05-10T13:45:28Z")

</div>

![]()
