---
title: "Update a webhook configuration for an app"
method: PATCH
path: "/app/hook/config"
tags: ["apps"]
---

# Update a webhook configuration for an app

`PATCH /app/hook/config`

Updates the webhook configuration for a GitHub App. For more information about configuring a webhook for your app, see "[Creating a GitHub App](/developers/apps/creating-a-github-app)."

You must use a [JWT](https://docs.github.com/enterprise-cloud@latest/apps/building-github-apps/authenticating-with-github-apps/#authenticating-as-a-github-app) to access this endpoint.

## Request body

- object
  - `url` string, uri — The URL to which the payloads will be delivered.
  - `content_type` string — The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
  - `secret` string — If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/enterprise-cloud@latest/webhooks/event-payloads/#delivery-headers).
  - `insecure_ssl` union
    - string — Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. **We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.**
    - number

## Response `200`

Response

- WebhookConfig — Configuration object of the webhook
  - `url` string, uri — The URL to which the payloads will be delivered.
  - `content_type` string — The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
  - `secret` string — If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/enterprise-cloud@latest/webhooks/event-payloads/#delivery-headers).
  - `insecure_ssl` union
    - string — Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. **We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.**
    - number

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-2.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-2/versions/8ae6d0c8716e/schema)