---
title: "Create or update the inbound webhook"
method: PUT
path: "/inbox/webhook"
tags: ["inbox"]
---

# Create or update the inbound webhook

`PUT /inbox/webhook`

## Request

- Base URL: `https://api.mailly.site` (the document declares no server; this is the origin it was published from)
- URL: `https://api.mailly.site/inbox/webhook`
- Auth: HTTP bearer

url must be public HTTPS. When bodyFormat is omitted, the existing setting is kept. Use either signingSecret (32-256 characters) or rotateSecret; a generated secret is returned only once in the response.

## Request body

- object
  - `url` string
  - `active` boolean
  - `bodyFormat` string: text / html / markdown
  - `stripQuotes` boolean
  - `signingSecret` string
  - `rotateSecret` boolean

## Response `200`

Updated

- object
  - `success` boolean, required
  - `webhook` object, required
  - `signingSecret` string

## Other responses

- `201`: Created
- `400`: Invalid configuration
- `401`: Missing or invalid API key

---

[API](https://skmtc.dev/mailly/apis/mailly-api.md) · [All operations](https://skmtc.dev/mailly/apis/mailly-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mailly/apis/mailly-api/revisions/1ceb29637301?raw)