---
title: "Update a webhook"
method: PATCH
path: "/webhooks/{id}"
tags: ["Webhooks"]
---

# Update a webhook

`PATCH /webhooks/{id}`

## Request

- Base URL: `https://madeonsol.com/api/v1`
- URL: `https://madeonsol.com/api/v1/webhooks/{id}`
- Auth: HTTP bearer

Patchable: url, events, filters (min_sol/action/kol_name/deployer_tier/min_kols), is_active (re-enable after auto-disable).

## Response `200`

Updated

- object
  - `webhook` object
    - `id` integer
    - `url` string, uri
    - `events` string[]
    - `filters` WebhookFilters: Optional per-event delivery filters on a webhook. wallet_tracker:event (since 2026-09-25): only min_sol, action and conditions on its own fields apply, after the subscriber check; on a webhook subscribed to wallet_tracker:event alone any other named filter is a 400.
      - `min_sol` number: Minimum sol_amount (kol:trade, wallet_tracker:event)
      - `action` 'buy' | 'sell': kol:trade, wallet_tracker:event (transfers have no action and are excluded)
      - `kol_name` string
      - `deployer_tier` string[]
      - `min_kols` integer
      - `kinds` string[]: token:surge / token:revival only
      - `tiers` string[]: token:surge / token:revival only
      - `launchpads` string[]: token:surge / token:revival only
      - `exclude_flags` string[]: token:surge / token:revival only
      - `min_mc_usd` number
      - `max_mc_usd` number
      - `types` string[]: dev:activity and rhc:dev_activity: event types to deliver. rhc:dev_activity carries dev_buy / dev_sell only (developer token transfers are never delivered on Robinhood Chain in v1), so the transfer types never match there.
      - `token_mints` string[]: dev:activity only: mints
      - `addresses` string[]: rhc:dev_activity only: 0x token addresses (case-insensitive)
      - `deployers` string[]: dev:activity (base58) and rhc:dev_activity (0x, case-insensitive): matches deployer_wallet or actor_wallet
      - `conditions` object[]: ULTRA+ (2026-09-08). Custom { field, op, value } triples ANDed together and evaluated against the raw event payload, on top of the named filters. `field` must be a documented payload field of one of the webhook's subscribed event types (one level of dot-path allowed, e.g. `triggering_trade.sol_amount`); anything else is a 400. Number fields take eq/neq/gt/gte/lt/lte/in, strings eq/neq/in/contains, booleans eq/neq. On PRO the request is a 403 tier_required.
        - `field` string, required
        - `op` 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'contains', required
        - `value` union, required: number | string | boolean, or a non-empty array (≤20) for `in`.
          - number
          - string
          - boolean
          - union[]
            - union
              - …
    - `is_active` boolean
    - `updated_at` string, date-time

## Other responses

- `401`: Missing or invalid API key, or an expired free-tier key. Authentication-stage error: no `X-RateLimit-*` headers, no `_rid`.
- `403`: Forbidden. One of: the key's tier is below this endpoint's or parameter's gate (`tier_required` with an `upgrade` block); the public demo key used outside its allow-list (`demo_key_endpoint_not_allowed`); an invalid or revoked key; an origin-restricted key called from a disallowed origin (`code` `origin_not_allowed` / `origin_required`). `X-RateLimit-*` headers are present only on `tier_required`.
- `404`: Not found
- `429`: Too many requests. Every 429 carries `Retry-After`. A quota 429 (`rate_limit_exceeded`, with `X-RateLimit-*`), a heavy-query concurrency 429 (`error_kind` `concurrency`/`capacity`), or the per-IP authentication-failure block (30 failed auths/min; plain `error` + `retry_after_seconds`, no `X-RateLimit-*`).
- `500`: Unexpected server error from the route (`Internal server error`, with `_rid`). Safe to retry with backoff. A failed API-key lookup is a 503 `auth_backend_unavailable`, never a 500.
- `503`: The API-key or subscription lookup could not be answered (authentication stage). Retryable and not your fault: it is never counted as a failed authentication. Honour `Retry-After`; no `X-RateLimit-*`, no `_rid`.

---

[API](https://skmtc.dev/madeonsol/apis/madeonsol-api.md) · [All operations](https://skmtc.dev/madeonsol/apis/madeonsol-api/llms.txt) · [OpenAPI document](https://skmtc.dev/madeonsol/apis/madeonsol-api/revisions/96ce84657f55?raw)