# GET /api/v1/event-subscriptions

Auth: Bearer

HTML: https://cooperemail.com/docs/reference/event-subscriptions

## Summary

List MCP event subscriptions for this account. Requires webhook_read. Each row has id, name, inbox_id, inbox address, callback_host, status, refresh_before, created_at, last_delivery_at, and last_delivery_status. callback_host is the hostname only. The callback URL and the signing secret are not returned. Newest created_at first. Ended rows stay, with retained true, for audit. An ended row does not deliver and does not count toward the 20 subscription cap. An inbox-scoped key sees only its inbox.

## Request

This call has no JSON body.

## Response

HTTP 200. Sample values illustrate the schema.

```json
{
  "object": "list",
  "data": [
    {
      "object": "event_subscription",
      "id": "inb_example",
      "name": "string",
      "inbox_id": "inb_example",
      "inbox": "string",
      "callback_host": "string",
      "status": "active",
      "refresh_before": "string",
      "created_at": "2026-10-18T12:00:00.000Z"
    }
  ]
}
```

## Errors

- HTTP 403 permission_denied

The live `message` is the sentence for that code. Branch on `code`.

```json
{
  "error": {
    "type": "authentication_error",
    "code": "permission_denied",
    "docs_url": "https://cooperemail.com/docs#permission_denied"
  }
}
```

## Idempotency

This route does not document Idempotency-Key or client_id.