diff --git a/app/views/api/v1/accounts/webhooks/_webhook.json.jbuilder b/app/views/api/v1/accounts/webhooks/_webhook.json.jbuilder
index 7b1943c5d..3d1bd9459 100644
--- a/app/views/api/v1/accounts/webhooks/_webhook.json.jbuilder
+++ b/app/views/api/v1/accounts/webhooks/_webhook.json.jbuilder
@@ -3,7 +3,7 @@ json.name webhook.name
 json.url webhook.url
 json.account_id webhook.account_id
 json.subscriptions webhook.subscriptions
-json.secret webhook.secret
+json.secret webhook.secret if @access_token&.scope != 'read_only'
 if webhook.inbox
   json.inbox do
     json.id webhook.inbox.id