---
title: "Register or update the profile webhook"
method: PUT
path: "/v1/webhooks"
tags: ["Webhooks"]
---

# Register or update the profile webhook

`PUT /v1/webhooks`

## Request

- Base URL: `https://api.configure.dev`
- URL: `https://api.configure.dev/v1/webhooks`
- Auth: API key in header `X-API-Key`

One endpoint per agent and plane. The secret is returned only when this call mints it (create or rotate_secret). Events are signed per Standard Webhooks.

## Headers

- `X-Agent` string

## Request body

- object
  - `url` string, uri, required
  - `rotate_secret` boolean

## Response `200`

Endpoint updated.

## Other responses

- `201`: Endpoint created; the response carries `secret`.
- `400`: Request shape is invalid.
- `403`: Forbidden. Common causes include secret_key_required, token_wrong_type, approval_required, or access_denied.
- `429`: Rate or concurrency limit exceeded.

---

[API](https://skmtc.dev/configure/apis/configure-http-api.md) · [All operations](https://skmtc.dev/configure/apis/configure-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/configure/apis/configure-http-api/revisions/ec760a9533d2?raw)