You must be an organization owner{% ifversion custom-org-roles %} or have the "Manage organization webhooks" permission{% endif %} to use these endpoints. OAuth tokens require the `admin:org_hook` scope to use these endpoints.

In order to protect sensitive data which may be present in webhook configurations, we also enforce the following access control rules:

- {% data variables.product.prodname_oauth_apps %} cannot list, view, or edit webhooks which they did not create.

- Users cannot list, view, or edit webhooks which were created by {% data variables.product.prodname_oauth_apps %}.