# \#validation
**URL:** https://community.toggl.com/tag/validation/155.md
[Latest](https://community.toggl.com/latest.md) · [Categories](https://community.toggl.com/categories.md) · [Tags](https://community.toggl.com/tags.md)
---
## ["Validate" Endpoint - GET Sets the subscription as validated](https://community.toggl.com/t/validate-endpoint-get-sets-the-subscription-as-validated/409)
**Author:** [@Support](https://community.toggl.com/u/Support)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 5:54pm UTC](https://community.toggl.com/t/validate-endpoint-get-sets-the-subscription-as-validated/409 "2024-12-02T17:54:21Z")
https://api.track.toggl.com/webhooks/api/v1/validate/{workspace\_id}/{subscription\_id}/{validation\_code} Sets the subscription as validated if the received {validation\_code} matches the ones stored for {subscription\_id}. …
---
## [Webhooks API Validating Received Events](https://community.toggl.com/t/webhooks-api-validating-received-events/399)
**Author:** [@Support](https://community.toggl.com/u/Support)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 5:45pm UTC](https://community.toggl.com/t/webhooks-api-validating-received-events/399 "2024-12-02T17:45:58Z")
In order to be sure that Toggl is the one sending events to your URL endpoint we include a special HTTP header X-Webhook-Signature-256 that you can use to validate that no one else is sending those requests. In order to…
---
## [Webhooks API URL Endpoint Validation](https://community.toggl.com/t/webhooks-api-url-endpoint-validation/398)
**Author:** [@Support](https://community.toggl.com/u/Support)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 5:45pm UTC](https://community.toggl.com/t/webhooks-api-url-endpoint-validation/398 "2024-12-02T17:45:09Z")
For a subscription to receive events it has to be both enabled and validated. The objective of the validation is for the end user to prove that they have access to the events we will send to the URL endpoint. Otherwise,…