I have a phantom orders/create webhook firing for one of my development stores, and I can't figure out where it's coming from. I can't see any of the API-created webhooks in the store's Shopify Admin, and it seems webhooks are OAuth-token specific and it's not showing up under the tokens I've kept track of when I use the webhooks API endpoint.
Is there any other way to see this? Or a way to retrieve all historical OAuth tokens granted for a given shop + api key? Or a way to delete a (stale) webhook for a shop if I have the webhook ID but don't know the corresponding OAuth token? Thank you.