---
title: "Update a webhook endpoint"
method: POST
path: "/webhook-endpoints/{id}"
tags: ["Webhooks"]
---

# Update a webhook endpoint

`POST /webhook-endpoints/{id}`

## Request

- Base URL: `https://api.palisade.email`
- URL: `https://api.palisade.email/webhook-endpoints/{id}`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

## Path parameters

- `id` string, uuid, required

## Headers

- `Palisade-Version` '2025-04-30' | 'unstable', required

## Request body

- object
  - `url` string, uri
  - `description` string, nullable
  - `enabled_events` string[]
  - `status` 'ENABLED' | 'DISABLED'

## Response `200`

Success

- WebhookEndpoint
  - `id` string, uuid, required
  - `url` string, uri, required
  - `description` string, nullable, required
  - `enabled_events` string[], required: Event types this endpoint receives. An empty array means every event, including ones added later — not none.
  - `status` 'ENABLED' | 'DISABLED' | 'AUTO_DISABLED', required: ENABLED receives events. DISABLED was turned off by you. AUTO_DISABLED was turned off by Palisade after repeated delivery failures and stays off until you re-enable it, which also clears the failure count.
  - `secret_reminder` string, required: Last 4 characters of the signing secret. The full secret is returned only at creation.
  - `api_version` string, required: API version the payload shape is pinned to, captured when the endpoint was created.
  - `consecutive_failures` number, required
  - `disabled_reason` string, nullable, required
  - `last_success_at` string, date-time, nullable, required
  - `last_failure_at` string, date-time, nullable, required
  - `created_by` string, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

---

[API](https://skmtc.dev/palisade/apis/palisade-api.md) · [All operations](https://skmtc.dev/palisade/apis/palisade-api/llms.txt) · [OpenAPI document](https://skmtc.dev/palisade/apis/palisade-api/revisions/37b4ae5a7766?raw)
