---
title: "Update a webhook"
method: PATCH
path: "/api/v1/webhooks/{id}"
tags: ["Webhooks"]
---

# Update a webhook

`PATCH /api/v1/webhooks/{id}`

## Request

- Base URL: `https://api.sendly.now`
- URL: `https://api.sendly.now/api/v1/webhooks/{id}`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `better-auth.session_token`
  - OAuth 2 (authorization code, authorization URL `https://app.sendly.now/api/auth/oauth2/authorize`, token URL `https://app.sendly.now/api/auth/oauth2/token`, scopes: `webhooks:write`)

Partial update. Omitted fields are left alone.

`event_types` REPLACES the stored subscription list rather than merging into it, so an event you omit is unsubscribed. Setting `status` back to `ACTIVE` from `DISABLED` also clears the consecutive-failure counter, so an auto-disabled endpoint gets a clean slate.

The signing secret is untouched by an update, and is not part of this response.

Requires the `webhooks:write` scope — Create, edit, and delete your webhook endpoints.

## Path parameters

- `id` string, uuid, required: Resource id.

## Request body

- WebhookV1Update: Body for PATCH /api/v1/webhooks/{id}.
  - `event_types` string[]
  - `status` 'ACTIVE' | 'PAUSED' | 'DISABLED'
  - `url` string, uri

## Response `200`

The updated webhook

- WebhookV1: A webhook endpoint as exposed on the v1 API. The signing secret is NEVER on this shape — it is returned once, by create and by rotate, and no endpoint reads it back.
  - `created_at` string, date-time, required
  - `event_types` string[], required
  - `id` string, uuid, required
  - `status` 'ACTIVE' | 'PAUSED' | 'DISABLED', required
  - `updated_at` string, date-time, required
  - `url` string, required

## Other responses

- `401`: `invalid_api_key` or `invalid_session` — missing or invalid credentials.
- `403`: `scope_missing`, `project_access_denied`, or `project_disabled`.
- `404`: `resource_not_found` — no webhook with this id belongs to the authenticated project.
- `422`: `validation_error` — query, path, or body parameters did not match the schema.
- `429`: `rate_limited` — see `Retry-After` and the `RateLimit` headers.
- `500`: `internal_error`.

---

[API](https://skmtc.dev/sendly/apis/sendly-api.md) · [All operations](https://skmtc.dev/sendly/apis/sendly-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sendly/apis/sendly-api/revisions/ce7cfb7f7c7e?raw)