For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Bearer authentication of the form Bearer <token>, where token is your auth token.
Path parameters
idstringRequired
Webhook ID
Request
This endpoint expects an object.
urlstringOptional
Webhook endpoint URL
secretstringOptional
Secret for webhook signature verification
disabled_atstringOptional
Timestamp when webhook was disabled
enabled_eventslist of stringsOptional
Array of event types to subscribe to
includestringOptional
Comma-delimited list of associations to include in webhook payloads. Omit or set to ”*” for all. Use “identifiers” to receive only top-level scalar fields (id, external_id, name, status, etc.) with no associations.
oidc_auth_methodenumOptional
OIDC authentication method for obtaining access tokens. Required when configuring OIDC. 'private_key_jwt' — requires oidc_client_id, oidc_token_endpoint, oidc_access_token_ttl_seconds. 'client_secret' — requires oidc_client_id, oidc_client_secret, oidc_token_endpoint, oidc_access_token_ttl_seconds. Both methods optionally accept oidc_scope and oidc_resource_uri.
Allowed values:
oidc_client_idstringOptional
OIDC client ID. Required for both auth methods.
oidc_client_secretstringOptional
OIDC client secret. Required when oidc_auth_method is ‘client_secret’. Write-only; never returned in responses.
oidc_token_endpointstringOptional
OIDC token endpoint URL. Required for both auth methods.
oidc_resource_uristringOptional
Optional. OIDC resource URI (Microsoft-specific; use oidc_scope for standard OAuth 2.0).
oidc_scopestringOptional
Optional. OAuth 2.0 scope for the token request (e.g. “api://<app-id>/.default”).
oidc_access_token_ttl_secondsintegerOptional
OIDC access token TTL in seconds. Required for both auth methods.
Response
webhook updated
Errors
404
Update Webhook Request Not Found Error
OIDC authentication method for obtaining access tokens. Required when configuring OIDC. ‘private_key_jwt’ — requires oidc_client_id, oidc_token_endpoint, oidc_access_token_ttl_seconds. ‘client_secret’ — requires oidc_client_id, oidc_client_secret, oidc_token_endpoint, oidc_access_token_ttl_seconds. Both methods optionally accept oidc_scope and oidc_resource_uri.