# Webhook Endpoint With Secret (/ar/api-reference/objects/webhook-endpoint-with-secret)

A Webhook Endpoint with its signing secret, returned only when the endpoint is created or its secret is rotated. Store the secret securely and use it to verify incoming webhook signatures.

## Fields

- `id` (string, required) — Unique identifier
- `object` (enum("webhook_endpoint"), required)
- `url` (string, required) — The URL to send webhook events to
- `description` (string | null, required) — Human-readable description
- `status` (enum("enabled" | "disabled"), required)
- `enabledEvents` (Array<string>, required) — Enabled event types; ['*'] subscribes to all events
- `livemode` (boolean, required) — Whether this endpoint exists in the live database
- `metadata` (object, required) — Merchant-supplied custom metadata
- `createdAt` (string (date-time), required) — Creation timestamp (ISO 8601)
- `updatedAt` (string (date-time), required) — Last update timestamp (ISO 8601)
- `secret` (string, required) — One-time signing secret returned only on creation or rotation; store securely