---
title: "Update a webhook configuration for an organization"
method: PATCH
path: "/orgs/{org}/hooks/{hook_id}/config"
tags: ["orgs"]
---

# Update a webhook configuration for an organization

`PATCH /orgs/{org}/hooks/{hook_id}/config`

Updates the webhook configuration for an organization. To update more information about the webhook, including the `active` state and `events`, use "[Update an organization webhook ](/rest/orgs/webhooks#update-an-organization-webhook)."

You must be an organization owner to use this endpoint. 

OAuth app tokens and personal access tokens (classic) need `admin:org_hook` scope. OAuth apps cannot list, view, or edit 
webhooks that they did not create and users cannot list, view, or edit webhooks that were created by OAuth apps.

## Path parameters

- `org` string, required
- `hook_id` integer, required

## Request body

- object
  - `url` string, uri — The URL to which the payloads will be delivered.
  - `content_type` string — The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
  - `secret` string — If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/enterprise-server@3.8/webhooks/event-payloads/#delivery-headers).
  - `insecure_ssl` union
    - string — Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. **We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.**
    - number

## Response `200`

Response

- WebhookConfig — Configuration object of the webhook
  - `url` string, uri — The URL to which the payloads will be delivered.
  - `content_type` string — The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
  - `secret` string — If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/enterprise-server@3.8/webhooks/event-payloads/#delivery-headers).
  - `insecure_ssl` union
    - string — Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. **We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.**
    - number

---

[API](https://skmtc.net/github/apis/ghes.md) · [All operations](https://skmtc.net/github/apis/ghes/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/ghes/revisions/5438365412fe/schema)