---
title: "Update a Webhook Callback"
method: PATCH
path: "/v1/webhook-callbacks/{id}"
tags: ["Webhooks"]
---

# Update a Webhook Callback

`PATCH /v1/webhook-callbacks/{id}`

Update a callback previously registered for webhooks

## Scopes

| Category | Read only Scope | Write only Scope (read access implicit) |
|---|---|---|
| Manage company resources (`company_admin`) | - | Manage webhooks (`webhook:write`) |

## Path parameters

- `id` string, required

## Request body

- UpdateWebhookCallbackParams — Webhook callback update params. Provide either `subscribed_events` or `subscribe_to_all_events` (they are mutually exclusive). Omitting `subscribe_to_all_events` leaves the current subscription mode unchanged, so resending an event list does not disable all-events delivery. Setting `subscribe_to_all_events: false` requires a non-empty `subscribed_events`.
  - `subscribe_to_all_events` boolean — When true, subscribe this callback to all current and future event types. Cannot be combined with `subscribed_events`.
  - `subscribed_events` string[]
  - `url` string

## Response `200`

Success

- WebhookCallbackResponse — Webhook callback response
  - `data` object, required
    - `webhook_callback` WebhookCallback, required — A registered webhook callback endpoint. Remote sends HTTP POST requests to the configured URL when subscribed events occur.
      - `id` string, required — The unique identifier (UUID) of the webhook callback.
      - `signing_key` string — This key will be used to sign the signature provided with webhook requests we send to the `url` you provided for this webhook callback. The webhook signature will be included in a custom header, `X-Remote-Signature`. You can use this signature to verify that requests are coming from Remote and not some unauthorized third-party.
      - `subscribe_to_all_events` boolean — When true, this callback is subscribed to all current and future event types. `subscribed_events` then lists every currently supported event.
      - `subscribed_events` string[]
      - `url` string, required — The HTTPS URL where Remote will send webhook event payloads.

## Other responses

- `401` — Unauthorized
- `404` — Not Found
- `422` — Unprocessable Entity

---

[API](https://skmtc.net/remote-com/apis/remote.md) · [All operations](https://skmtc.net/remote-com/apis/remote/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/remote-com/remote/versions/7e6a0c61ac82/schema)