---
title: "Update a webhook endpoint"
method: PATCH
path: "/v1/webhooks/applications/{appId}/endpoints/{id}"
tags: ["Webhook"]
---

# Update a webhook endpoint

`PATCH /v1/webhooks/applications/{appId}/endpoints/{id}`

## Request

- Base URL: `https://api.prod.keyban.io`
- URL: `https://api.prod.keyban.io/v1/webhooks/applications/{appId}/endpoints/{id}`
- Auth: API key in header `X-Api-Key`

Update the target URL, subscribed event types or enabled state. Does not rotate the signing secret.

## Path parameters

- `appId` string, required
- `id` string, required

## Request body

- UpdateWebhookEndpointDto
  - `url` string, uri, required: Absolute HTTPS URL that receives the POST deliveries. HTTP is rejected; private, loopback and link-local hosts and cloud metadata endpoints are blocked server-side (SSRF protection).
  - `eventTypes` string[], required: Event types this endpoint subscribes to. A delivery is sent only when the event type is in this list.
  - `enabled` boolean, required: When false, no delivery is sent — the endpoint (and its secrets) are kept so it can be re-enabled later.

## Response `200`

The updated endpoint

- WebhookEndpointDto
  - `id` string, uuid, required: Entity UUID
  - `createdAt` string, date-time, required: Creation date (ISO 8601)
  - `updatedAt` string, date-time, required: Last update date (ISO 8601)
  - `applicationId` string, uuid, required: Application (tenant) that owns this endpoint.
  - `url` string, uri, required: HTTPS URL that receives the deliveries.
  - `eventTypes` string[], required: Event types this endpoint is subscribed to.
  - `enabled` boolean, required: Whether deliveries are currently sent to this endpoint.

---

[API](https://skmtc.dev/keyban/apis/keyban-rest-apis.md) · [All operations](https://skmtc.dev/keyban/apis/keyban-rest-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/keyban/apis/keyban-rest-apis/revisions/0bb79a1da961?raw)