Update a Webhook Endpoint

Webhook is currently in Beta. APIs, fields, and behavior may change in future versions.

PUT /api/v1/forward/webhook/endpoints/{endpoint_id} Only fields included in the request are updated. Omitted fields keep their current values.

Headers

Header	Required	Description
`Authorization`	Yes	`Bearer <PAT or administrator SAT>`
`Content-Type`	Yes	`application/json`

Path parameters

Parameter	Type	Required	Description
`endpoint_id`	string	Yes	Webhook Endpoint ID.

Body parameters

Field	Type	Required	Description
`url`	string	No	New event receiver URL. HTTPS is recommended in production.
`description`	string	No	New purpose description.
`events`	string[]	No	Replaces the complete subscription list. Must contain at least one item. Accepts `*` or specific event names; prefix wildcards are not supported. See Supported public events for full event names and triggers.
`active`	boolean	No	Whether the Endpoint is enabled. You can also use the dedicated enable or disable API.
`metadata`	object	No	Merges custom metadata. Values are strings; pass `null` to remove a key.

Example request

curl -s -X PUT 'https://api.qoder.com/api/v1/forward/webhook/endpoints/e149c233-1234-4abc-8def-1234567890ab' \
  -H "Authorization: Bearer $QODER_PAT" \
  -H 'Content-Type: application/json' \
  -d '{
    "description": "Schedule completion notifications",
    "events": [
      "forward.schedule_run.succeeded",
      "forward.schedule_run.failed"
    ]
  }'

Example response

HTTP 200 OK

{
  "id": "e149c233-1234-4abc-8def-1234567890ab",
  "url": "https://example.com/webhooks/qoder",
  "description": "Schedule notifications",
  "events": [
    "forward.schedule.created",
    "forward.schedule_run.succeeded",
    "forward.schedule_run.failed"
  ],
  "metadata": {
    "environment": "production"
  },
  "active": true,
  "last_success_at": "2026-09-01T09:07:59Z",
  "last_failure_at": null,
  "consecutive_fail": 0,
  "created_at": "2026-09-01T08:00:00Z",
  "updated_at": "2026-09-01T09:07:59Z"
}

See Get a Webhook Endpoint for response fields. Updating an Endpoint does not return or rotate signing_secret.

Errors

HTTP	Type	Trigger
`400`	`invalid_request_error`	The URL, event list, metadata, or request body is invalid.
`401`	`authentication_error`	Authentication is missing, invalid, or expired.
`403`	`permission_error`	The current token cannot manage Webhooks.
`404`	`not_found_error`	The Endpoint does not exist or is not visible to the current account.
`413`	`invalid_request_error`	The request body is too large.
`500/502/503`	`api_error`	The service is temporarily unavailable.

​Headers

​Path parameters

​Body parameters

​Example request

​Example response

​Errors

​Related

Get a Webhook Endpoint

Disable a Webhook Endpoint

Headers

Path parameters

Body parameters

Example request

Example response

Errors

Related