---
title: "Create Or Update Webhook Config"
method: POST
path: "/consent-hosting/webhook-config"
tags: ["consent-hosting"]
---

# Create Or Update Webhook Config

`POST /consent-hosting/webhook-config`

## Request

- Base URL: `https://api.openproof.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openproof.io/consent-hosting/webhook-config`
- Auth: HTTP bearer

Secret is generated server-side and returned ONLY on this call --
the GET endpoint above never returns it back. If the business needs
to see it again, they must rotate (re-POST), same UX as most
webhook providers.

## Request body

- WebhookConfigCreate
  - `webhook_url` string, required

## Response `201`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/openproof/apis/openproof-api.md) · [All operations](https://skmtc.dev/openproof/apis/openproof-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openproof/apis/openproof-api/revisions/ddd0cac7c37e?raw)