Update webhook endpoint (no secret rotation)
const url = 'http://localhost:8080/v1/webhook-endpoints/endpoints/example';const options = { method: 'PATCH', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"url":"example","description":"example","events":["example"],"active":true}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request PATCH \ --url http://localhost:8080/v1/webhook-endpoints/endpoints/example \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "url": "example", "description": "example", "events": [ "example" ], "active": true }'Mutates url / description / events / active WITHOUT rotating the signing secret — the receiver keeps verifying while the target or event set changes. Fields omitted are left unchanged; events are validated against the emit catalog.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Header Parameters
Section titled “Header Parameters”Makes the call safe to retry. Send a unique value (a UUID works) and
the same value on every retry. For 24 hours, a repeat with the same
key, method, path and body gets the first response again, with an
Idempotent-Replayed: true header, instead of running again. The
error cases are in docs/api-surface.md. The usage routes do not take
it: each usage event carries its own idempotency_key.
Request Bodyrequired
Section titled “Request Bodyrequired”object
Example generated
{ "url": "example", "description": "example", "events": [ "example" ], "active": true}Responses
Section titled “Responses”Updated endpoint
object
Subscribed event types. * means all.
False = paused.
The previous signing secret, during a rotation grace period.
Example generated
{ "id": "example", "tenant_id": "example", "livemode": true, "url": "example", "description": "example", "secret_last4": "example", "events": [ "example" ], "active": true, "secondary_secret_last4": "example", "secondary_secret_expires_at": "2026-04-15T12:00:00Z", "created_at": "2026-04-15T12:00:00Z", "updated_at": "2026-04-15T12:00:00Z"}Endpoint not found
Invalid URL or unknown event type