---
title: "Update a webhook endpoint"
method: PUT
path: "/v1/me/webhooks/{endpointId}"
tags: ["Account"]
---

# Update a webhook endpoint

`PUT /v1/me/webhooks/{endpointId}`

## Request

- Base URL: `https://api.gunspec.io`
- URL: `https://api.gunspec.io/v1/me/webhooks/{endpointId}`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Updates the URL, subscribed events, description, or active state of one of your endpoints.

Requires an API key belonging to a user account. Acts on the calling account's own data.

## Path parameters

- `endpointId` string, required

## Request body

- object
  - `url` string: Where deliveries are POSTed. A public https hostname on port 443: no IP address, no credentials in the URL, and not a gunspec.io or workers.dev host. Redirects are not followed, so register the final URL. At most 2,048 characters.
  - `events` string[]: Event types this endpoint is subscribed to. The full list is on the `POST` operation.
  - `description` string: Prose summary of the record, where one has been written.
  - `active` boolean: False while the endpoint is paused. A paused endpoint receives nothing and is not retried.

## Response `200`

Update a webhook endpoint

- object
  - `success` boolean, required: Always true on a successful response. Every error carries `false` and an `error` object instead.
  - `data` WebhookEndpoint, required
    - `id` string, required: Opaque endpoint id. Address it at `/v1/me/webhooks/{endpointId}`.
    - `url` string, required: Absolute, directly fetchable URL.
    - `events` string[], required: Event types this endpoint is subscribed to. The full list is on the `POST` operation.
    - `description` string, nullable: Prose summary of the record, where one has been written.
    - `active` boolean, required: False while the endpoint is paused. A paused endpoint receives nothing and is not retried.
    - `createdAt` string: When the record was first added, `YYYY-MM-DD HH:MM:SS` in UTC.
    - `updatedAt` string: When the endpoint was last changed, ISO 8601.

## Other responses

- `400`: Validation error
- `401`: Missing or invalid API key
- `403`: The credential is valid and the caller is not permitted. Three causes, none of which reissuing a key changes: the plan is below the endpoint's tier, the account is suspended, or the key is not attached to the thing being acted on, meaning a user account for `/v1/me` or a shop for `/v1/vendor`. Distinct from 401, which means the credential is missing, malformed or expired and a new one can work.
- `404`: Resource not found
- `413`: The request body is larger than this endpoint accepts, which is 1 MB for a JSON body. Refused from `Content-Length` before the body is read, so nothing was stored and the request can be split and resent. `error.maxBytes` carries the limit.
- `429`: A limit was reached. `RATE_LIMITED` is the per-minute limit: wait `Retry-After` seconds (a minute) and retry. `DAILY_CAP_EXCEEDED` is the plan's daily limit, per key: nothing will be served until the counters return to zero at midnight UTC. `MONTHLY_CAP_EXCEEDED` is the plan's monthly allowance, for the whole account: nothing will be served until midnight UTC on the first of next month, or until the plan changes. For both, `Retry-After` is the seconds until then and `error.resetsAt` says when as an instant. Calls made after a refusal are refused too and do not spend the month, and a free key that keeps calling is paused, so stop at the first one and resume at the reset.
- `500`: Internal server error

---

[API](https://skmtc.dev/gunspec/apis/gunspec-io-api.md) · [All operations](https://skmtc.dev/gunspec/apis/gunspec-io-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gunspec/apis/gunspec-io-api/revisions/f2e974d8b05c?raw)