Skip to main content
GET
Read the account-specific webhook verification secret
Operations are enabled individually by server configuration. Disabled operations return 503 without a task. Music credit deduction is currently disabled.

Protect this secret

Authenticated API keys may retrieve {code:200,msg:“success”,data:{secret}}. Store the secret server-side. Verify X-APIstable-Signature (v1=<HMAC-SHA256 hex>) over X-APIstable-Timestamp + ”.” + the raw request body, enforce a timestamp tolerance, and deduplicate X-APIstable-Event-Id.

Authorizations

Authorization
string
header
required

Every valid key can submit and query its own account. Revoked keys are rejected.

Response

Success

code
any
required
msg
string
required
data
object
required