---
title: "Update a webhook endpoint"
method: PATCH
path: "/webhook-endpoints/{endpointId}"
tags: ["Webhooks"]
---

# Update a webhook endpoint

`PATCH /webhook-endpoints/{endpointId}`

Updates webhook endpoint metadata and delivery settings.

## Path parameters

- `endpointId` string, required — Webhook endpoint identifier.

## Request body

- UpdateWebhookEndpointBody — Webhook endpoint update request.
  - `enabled_events` string[] — Product event types to deliver to this endpoint.
  - `delivery_scope` WebhookEndpointDeliveryScopeInput — Webhook endpoint delivery-scope update.
    - `direct_message_delivery_enabled` boolean — Whether direct-message events are delivered for conversations the actor belongs to.
    - `type` 'workspace_member', required — Delivery scope type.
  - `name` string, nullable — Optional endpoint label.
  - `status` 'active' | 'disabled' — Endpoint status.
  - `url` string — HTTPS receiver URL.

## Response `200`

Updated webhook endpoint.

- WebhookEndpointResponse — Webhook endpoint response.
  - `data` WebhookEndpoint, required — Webhook endpoint metadata. Signing secret plaintext is never returned here.
    - `created_at` string, date-time, required — Endpoint creation timestamp.
    - `delivery_scope` union, required — Webhook endpoint runtime data recipient.
      - object — Member-targeted endpoint delivery scope.
        - `actor_workspace_membership_id` string, required — Workspace membership the endpoint acts as.
        - `direct_message_delivery_enabled` boolean, required — Whether direct-message events are delivered for conversations the actor belongs to.
        - `type` 'workspace_member', required — Delivery scope type.
      - object — Unsupported workspace export placeholder.
        - `status` 'unsupported' | 'requires_approval' | 'approved', required — Workspace export approval state.
        - `type` 'workspace_export', required — Delivery scope type.
    - `disabled_at` string, date-time, nullable, required — Endpoint disabled timestamp.
    - `enabled_events` string[], required — Product event types delivered to this endpoint.
    - `id` string, required — Webhook endpoint identifier.
    - `name` string, nullable, required — Endpoint label.
    - `object` 'webhook_endpoint', required — Object type.
    - `previous_signing_secret_expires_at` string, date-time, nullable, required — Previous secret expiration timestamp.
    - `signing_secret_prefix` string, required — Display-safe prefix of the active signing secret.
    - `status` 'active' | 'disabled', required — Endpoint status.
    - `updated_at` string, date-time, required — Last update timestamp.
    - `url` string, required — Receiver URL.
    - `workspace_id` string, required — Workspace identifier.

## Other responses

- `400` — Bad request.
- `401` — Missing or invalid API key.
- `403` — Forbidden.
- `404` — Not found.
- `409` — Conflict.
- `429` — Rate limit or quota exceeded.
- `500` — Internal server error.

---

[API](https://skmtc.net/ando/apis/ando-public-api.md) · [All operations](https://skmtc.net/ando/apis/ando-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ando/ando-public-api/versions/db1553a00d68/schema)