Skip to main content
Read the settings for the authenticated organization. 
GET /api/v2/org/settings

​
Response

​
org_id
string
required
The organization id.
​
default_callback_url
string
The webhook URL Tumban falls back to when a scan is submitted without a callback_url. null if not configured.
​
total_scans_completed
integer
required
Lifetime count of scans that finished successfully for this organization.
​
total_scans_dropped
integer
required
Lifetime count of scans that did not produce a triage report (failures and timeouts).
​
daily_scan_limit
integer
Per-organization daily cap on scan submissions, when one is configured. Absent (or null) when no cap is set. Counts roll over at 00:00 UTC. Submissions beyond the cap return 429 — see Rate limits. This field is read-only here; changes are made by Tumban support.
​
created_at
string
required
When the organization was first seen by Tumban.
​
updated_at
string
required
When settings were last modified.
The webhook signing secret is never returned by this endpoint. Use Rotate webhook secret to obtain a new one.

​
Example

curl https://api-v2.tumban.com/api/v2/org/settings \
  -H "Authorization: Bearer sk_xxx"

{
  "org_id": "org_2abc...",
  "default_callback_url": "https://your-app.example/webhooks/tumban",
  "total_scans_completed": 1284,
  "total_scans_dropped": 7,
  "created_at": "2026-01-15T08:32:11.234567+00:00",
  "updated_at": "2026-04-12T17:14:02.345678+00:00"
}

​
Errors

StatusDetail
404Org settings not found — the credential is valid but the org has no settings record yet (rare; usually auto-provisioned on first request).