---
title: "Update webhook"
method: PATCH
path: "/webhooks/{id}"
tags: ["webhooks"]
---

# Update webhook

`PATCH /webhooks/{id}`

Updates the webhook with the given ID. You can update the name, description, status, URL, and set basic authentication.
Changing the URL will require this webhook to be verified again.
Changing the status will disable/enable sending of identification events to your webhook.

## Path parameters

- `id` string, required

## Headers

- `X-API-Version` string, required

## Request body

- UpdateWebhookDtoV1
  - `url` string — URL of the webhook endpoint. Must start with https://.
  - `description` string — Description of the webhook.
  - `status` 'enabled' | 'disabled' — Status of the webhook: 'enabled' or 'disabled'.
  - `environment` object — Environment ID this webhook is associated with. Null if global.

## Response `200`

Webhook updated. Changes will take effect in a few minutes.

- WebhookResponse
  - `data` WebhookEntityV1, required
    - `id` string, required — Webhook ID.
    - `description` string, required — Description of the webhook.
    - `status` 'enabled' | 'disabled', required — Status of the webhook: 'enabled' or 'disabled'.
    - `verified` boolean, required — Indicates if the webhook endpoint has been verified.
    - `environment` object, required — Environment ID this webhook is associated with. Null if global.
    - `url` string, required — URL of the webhook endpoint. Must start with https://.
    - `legacy` boolean, required — True if webhook is legacy. See docs for more details.
    - `signing_key` string — The signing key for verifying webhook payloads. Will only be returned on creation. See docs for more details.
    - `basic_auth` object, nullable, required — Basic authentication credentials. Only applies to legacy webhooks.
    - `created_at` string, date-time, required — Timestamp of when the webhook was created.
    - `last_enabled_at` object, nullable — Timestamp of when the webhook was last enabled.
    - `last_disabled_at` object, nullable — Timestamp of when the webhook was last disabled.
  - `environment` object, nullable, required — Environment ID this webhook is associated with. Null if global.

## Other responses

- `400` — Error: Bad request.
- `401` — Unauthorized. API key is invalid.
- `403` — Forbidden. Insufficient permissions.
- `404` — Webhook does not exist.
- `422` — Error: Payload parameters are invalid.
- `429` — Error: API key has exceeded its rate limit.

---

[API](https://skmtc.net/fingerprint/apis/management-api.md) · [All operations](https://skmtc.net/fingerprint/apis/management-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fingerprint/management-api/versions/b17eccec9d47/schema)