Webhooks
Update webhook endpoint
PATCH
https://api.firstleeward.com/v0/webhooks/:idUpdate mutable fields (name, url). To rotate the signing secret, use POST /:id/rotate-secret. To disable, use POST /:id/disable.
Authorizations
Authorizationstring · headerrequiredAPI key as Bearer token, e.g. Bearer YOUR_API_KEY
Headers
Leeward-Versionenum<string>requiredAPI version (YYYY-MM-DD). Available option: 2026-09-18
Path Parameters
idstring<uuid>requiredWebhook ID
Body
application/json
namestringUpdated label.
urlstring<uri>New HTTPS endpoint.
Response
200Webhook endpoint configuration. The signing secret is never included in this response; it is only returned once at create and at rotate-secret time.
idstring<uuid>requiredUnique webhook identifier
namestringrequiredHuman-readable label
urlstringrequiredHTTPS endpoint that receives signed POSTs
statusstringrequiredLifecycle status. Disabled webhooks receive no deliveries.
Available options:
ACTIVEDISABLEDmodestringrequiredInteraction pattern of the endpoint.
Available options:
NOTIFICATIONREQUESTlastUsedAtstring<date-time> | nullrequiredTimestamp of the most recent successful delivery
createdAtstring<date-time>requiredISO 8601 creation timestamp
updatedAtstring<date-time>requiredISO 8601 last update timestamp
400Webhook URL is invalid - must be HTTPS and resolve to a public address
errorobjectrequiredShow child attributes
codestringrequiredmessagestringrequireddetailobject | nullrequired404Webhook not found
errorobjectrequiredShow child attributes
codestringrequiredmessagestringrequireddetailobject | nullrequired