Yeah, that’s why I linked to the page on how to get an app access token. Client ID’s can be public, which is why they are not sufficient to access this endpoint or otherwise you could easily see not only what webhooks other people are subscribed to, but their callback URL for the topic too, which is why App access tokens are required as they are private, and no one but the app owner should have access to them.
1 Like