> ## Documentation Index > Fetch the complete documentation index at: https://www.tryleap.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Leap's API is at https://api.tryleap.ai. Send the key in the x-api-key header or as Authorization: Bearer; keys start with leap_. > Take model IDs and input schemas from GET /v1/models/{creator}/{name}, or from https://api.tryleap.ai/v1/public/models without a key. Never guess an input field: unknown fields are a 400. > Model inputs take uploaded file IDs (file_...), never URLs. > To give a coding agent the whole API, install the Leap skill: curl -fsSL https://www.tryleap.ai/install.sh | sh > The full OpenAPI 3.1 spec is at https://www.tryleap.ai/docs/openapi.json. # List webhook endpoints > Your workspace's webhook endpoints, newest first. Their secrets are never listed. Needs an API key with the `generations:read` scope. ## OpenAPI ````yaml /openapi.json get /v1/webhook_endpoints openapi: 3.1.0 info: title: Leap API version: 1.0.0 description: >- One API for the best image, video and audio models. Every request goes to `https://api.tryleap.ai` with your API key in the `x-api-key` header, or as `Authorization: Bearer leap_...`. Create a key at https://app.tryleap.ai/go/api. Guides, examples and the errors list are at https://www.tryleap.ai/docs. servers: - url: https://api.tryleap.ai security: - ApiKey: [] - Bearer: [] tags: - name: Models description: >- Every model and preset you can run, with its price and the JSON Schema of the input it takes. - name: Quotes description: >- The exact price of a run before you start it, with its input checked and its defaults filled in. - name: Generations description: >- A generation is one run of a model or preset: queued, then running, then succeeded, failed or canceled. Only a succeeded run is charged. - name: Batches description: >- Up to 50 generations priced and held together in one request, each then run as its own generation. - name: Webhooks description: >- URLs your workspace's events are POSTed to, signed following Standard Webhooks, and the default secret for the `webhook` URL a request names. - name: Events description: >- What happened in your workspace, kept 30 days, with each delivery to your webhooks and a way to send one again. - name: Files description: >- Photos, videos and sounds that models take as input. Upload one, then pass its `file_...` ID in the input field the model's schema names. - name: Credits description: Your workspace's balance in US dollars. externalDocs: url: https://www.tryleap.ai/docs paths: /v1/webhook_endpoints: get: tags: - Webhooks summary: List webhook endpoints description: >- Your workspace's webhook endpoints, newest first. Their secrets are never listed. Needs an API key with the `generations:read` scope. operationId: listWebhookEndpoints parameters: - in: query name: limit schema: description: 'Maximum number of rows to return: 1 to 100; default 50.' type: string pattern: ^\d{1,3}$ description: 'Maximum number of rows to return: 1 to 100; default 50.' - in: query name: cursor schema: description: Send next_cursor as cursor; omit it for the first page. type: string minLength: 1 maxLength: 512 pattern: ^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$ description: Send next_cursor as cursor; omit it for the first page. responses: '200': description: A page of endpoints. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: example: object: list url: /v1/webhook_endpoints data: - id: we_5Tq8Lm2Xv9Kr4Wn7Bc1Yd3Hp object: webhook_endpoint url: https://example.com/webhooks/leap description: Production renders events: - generation.succeeded - generation.failed disabled: false disabled_reason: null created_at: '2026-10-04T18:20:03.441Z' updated_at: '2026-10-04T18:20:03.441Z' has_more: false next_cursor: null schema: $ref: '#/components/schemas/WebhookEndpointList' '400': $ref: '#/components/responses/InvalidParameterOrConflictingCredentials' '401': $ref: '#/components/responses/AuthenticationRequired' '403': $ref: '#/components/responses/PermissionDenied' '429': $ref: '#/components/responses/RateLimitExceeded' components: headers: X-Request-Id: required: true description: >- This request's ID. Include it when you contact support; it's also `request_id` in an error. schema: type: string description: >- This request's ID. Include it when you contact support; it's also `request_id` in an error. example: req_01J9Z8Q4N2K7T5V3X6Y8B0C1D2 RateLimit-Limit: required: true description: Requests allowed per window from your client. schema: type: integer minimum: 0 maximum: 9007199254740991 description: Requests allowed per window from your client. example: 300 RateLimit-Remaining: required: true description: Requests left in the current window. schema: type: integer minimum: 0 maximum: 9007199254740991 description: Requests left in the current window. example: 299 RateLimit-Reset: required: true description: Seconds until the window resets. schema: type: integer minimum: 0 maximum: 9007199254740991 description: Seconds until the window resets. example: 42 Retry-After: required: true description: Seconds to wait before you retry. schema: type: integer minimum: 0 maximum: 9007199254740991 description: Seconds to wait before you retry. example: 42 schemas: WebhookEndpointList: type: object properties: object: type: string const: list description: The list object discriminator. url: type: string description: The list's resource path, such as /v1/records. data: type: array items: $ref: '#/components/schemas/WebhookEndpoint' description: Resource objects in this page, in the requested order. has_more: type: boolean description: Whether another page is available using next_cursor. next_cursor: anyOf: - type: string minLength: 1 maxLength: 512 pattern: ^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$ description: >- Opaque next_cursor from the previous page. It works only for the list and filters it came from. - type: 'null' description: Send as cursor to read the next page; null on the last page. required: - object - url - data - has_more - next_cursor additionalProperties: false description: >- Forward list envelope. Live lists are not snapshots; totals are not promised. WebhookEndpoint: type: object properties: id: type: string description: The endpoint's ID, `we_...`. object: type: string const: webhook_endpoint url: type: string description: Where Leap POSTs events. description: description: Your note, if any. type: - string - 'null' events: type: array items: type: string description: >- The event types it gets; ["*"] for every type, including types added later. disabled: type: boolean description: Whether deliveries to it are stopped. disabled_reason: description: >- Why Leap disabled the endpoint, such as every delivery failing for 72 hours; null when it is on or you turned it off. type: - string - 'null' created_at: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$ description: When it was created. updated_at: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$ description: When it last changed. required: - id - object - url - description - events - disabled - disabled_reason - created_at - updated_at additionalProperties: false description: A URL your workspace's events are POSTed to. Error: type: object properties: error: type: object properties: type: type: string enum: - invalid_request_error - rate_limit_error - authentication_error - permission_error - conflict_error - billing_error - api_error description: >- The kind of error. Branch on `type` and `code`, never on `message`. code: type: string enum: - invalid_parameter - invalid_request - conflicting_credentials - placeholder_in_path - method_not_allowed - payload_too_large - unsupported_media_type - ip_rate_limit_exceeded - authentication_required - missing_api_key - invalid_api_key - permission_denied - not_found - resource_not_found - gone - conflict - rate_limit_exceeded - insufficient_credit - service_unavailable - internal_error description: >- A stable code for this error. Each one is explained at https://www.tryleap.ai/docs/errors. message: type: string description: >- What went wrong, written for a person. It can change; don't parse it. param: description: >- For a `400`, the field at fault, such as `input.prompt`; otherwise null. type: - string - 'null' doc_url: description: A page that explains this error, when there is one. type: - string - 'null' request_id: type: string description: >- This request's ID, as in the `X-Request-Id` header. Include it when you contact support. required: - type - code - message - param - doc_url - request_id additionalProperties: false required: - error additionalProperties: false responses: InvalidParameterOrConflictingCredentials: description: '`invalid_parameter`, `conflicting_credentials`' headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' examples: invalid_parameter: value: error: type: invalid_request_error code: invalid_parameter message: Invalid request parameters. param: null doc_url: null request_id: req_8kQ2vX9mR4tL6nB1cW3yZ5aD conflicting_credentials: value: error: type: invalid_request_error code: conflicting_credentials message: Send one API key. param: null doc_url: null request_id: req_8kQ2vX9mR4tL6nB1cW3yZ5aD AuthenticationRequired: description: '`authentication_required`' headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' examples: authentication_required: value: error: type: authentication_error code: authentication_required message: Authentication is required. param: null doc_url: null request_id: req_8kQ2vX9mR4tL6nB1cW3yZ5aD PermissionDenied: description: '`permission_denied`' headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' examples: permission_denied: value: error: type: permission_error code: permission_denied message: Permission denied. param: null doc_url: null request_id: req_8kQ2vX9mR4tL6nB1cW3yZ5aD RateLimitExceeded: description: '`rate_limit_exceeded`' headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' Retry-After: $ref: '#/components/headers/Retry-After' content: application/json: schema: $ref: '#/components/schemas/Error' examples: rate_limit_exceeded: value: error: type: rate_limit_error code: rate_limit_exceeded message: Too Many Requests param: null doc_url: null request_id: req_8kQ2vX9mR4tL6nB1cW3yZ5aD securitySchemes: ApiKey: type: apiKey in: header name: x-api-key description: >- Your workspace API key, `leap_...`. Create one at https://app.tryleap.ai/go/api, and keep it on your server. Bearer: type: http scheme: bearer description: >- The same API key as `Authorization: Bearer leap_...`, the way most HTTP clients and coding agents send one. Send one header or the other; two different keys are a `400`. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.