Edit a webhook without rotating its signing secret

Minimum role: ADMIN. Active workspace via the X-Workspace-Id header.

Changes url, events or active while keeping the signingSecret. It is the alternative to DELETE + POST, which rotates the secret and forces the integrator on the other end to reconfigure signature verification.

PATCH/webhooks/{id}

Authorization

AuthorizationAPI key · headerrequired

API key prefixed with Bearer . Alternative: the x-api-key header with the raw key. Available scopes: read and write (see /.well-known/oauth-protected-resource).

x-api-keyAPI key · headerrequired

Raw API key (without Bearer ), alternative to Authorization.

Path parameters

idstringrequired

Header parameters

X-Workspace-Idstring

Active workspace to operate on. Optional: when omitted, the default workspace of the user who owns the key is used (pickActiveOrg).

Request body

requiredapplication/json

urlstring<uri>

eventsstring[]

min items 1

activeboolean

Responses

200

dataWebhookrequired

Show properties

idstringrequired

urlstringrequired

eventsstring[]required

activebooleanrequired

lastDeliveryAtstring | nullrequired

Show properties

Any of:

string

string

null

null

lastDeliveryStatusinteger | nullrequired

Show properties

Any of:

integer

integer

null

null

failureCountintegerrequired

min -9007199254740991 · max 9007199254740991

createdAtstringrequired

updatedAtstringrequired

401

Missing or invalid credential.

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

retryablebooleanrequired

detailsany

403

Insufficient role or resource not accessible.

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

retryablebooleanrequired

detailsany

404

Resource does not exist or is out of scope.

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

retryablebooleanrequired

detailsany

422

Request body/parameter validation failed.

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

retryablebooleanrequired

detailsany

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

API keyRemember on this deviceInclude my values in samples

Parameters

idpath*X-Workspace-IdheaderActive workspace to operate on. Optional: when omitted, the default workspace of the user who owns the key is used (pickActiveOrg).

Bodyapplication/json

Request body

Request

curl -X PATCH 'https://admin.appfreeticket.com/api/v1/webhooks/string' \
  -H 'Authorization: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "url": "http://example.com",
  "events": [
    "sale.confirmed"
  ],
  "active": true
}'

const response = await fetch("https://admin.appfreeticket.com/api/v1/webhooks/string", {
  method: "PATCH",
  headers: {
    "Authorization": "YOUR_API_KEY",
    "Content-Type": "application/json"
  },
  body: "{\n  \"url\": \"http://example.com\",\n  \"events\": [\n    \"sale.confirmed\"\n  ],\n  \"active\": true\n}"
});

import requests

response = requests.patch(
    "https://admin.appfreeticket.com/api/v1/webhooks/string",
    headers={
        "Authorization": "YOUR_API_KEY",
        "Content-Type": "application/json"
    },
    data="{\n  \"url\": \"http://example.com\",\n  \"events\": [\n    \"sale.confirmed\"\n  ],\n  \"active\": true\n}",
)

Response

{
  "data": {
    "id": "string",
    "url": "string",
    "events": [
      "string"
    ],
    "active": true,
    "lastDeliveryAt": "string",
    "lastDeliveryStatus": -9007199254740991,
    "failureCount": -9007199254740991,
    "createdAt": "string",
    "updatedAt": "string"
  }
}

{
  "error": {
    "code": "string",
    "message": "string",
    "retryable": true,
    "details": null
  }
}

{
  "error": {
    "code": "string",
    "message": "string",
    "retryable": true,
    "details": null
  }
}

{
  "error": {
    "code": "string",
    "message": "string",
    "retryable": true,
    "details": null
  }
}

{
  "error": {
    "code": "string",
    "message": "string",
    "retryable": true,
    "details": null
  }
}