Skip to main content
PATCH
Update a webhook subscription.

Authorizations

X-Pubkey, X-Timestamp, X-Signature
string
header
required

Headers

X-Pubkey
string
required

Integrator's ECDSA public key (P-256 curve, compressed SEC1 format). Example: 0x038fedef7c12f93bbf342ad8943b7a825a3b41f61c9dc118b2c718efebabbf62fd

X-Timestamp
string
required

Unix timestamp in seconds (UTC). Must be within tolerance window (1 minute) to prevent replay attacks. Example: 1760375826

X-Signature
string
required

ECDSA signature (DER-encoded, hex with 0x prefix). Signs the message: {timestamp}{METHOD}{path_and_query}{json_body}. Example: 0x3045022100...

Body

application/json
url
string | null
name
string | null
enabled
boolean | null
eventTypes
string[] | null
httpHeaders
object | null

Per-header patch merged into the current custom headers: a string sets or replaces that header, null deletes it, and an absent name keeps its value. Omit, null or {} to leave all headers unchanged. Every name in the patch must be a valid, non-reserved HTTP header name; limits (max 16, 8 KiB total) and case-insensitive duplicates are validated on the merged result.

Response

Webhook subscription updated

subscription
object
required
publicKey
string
required
algorithm
string
required