Update a webhook
Changes only what you send: url, enabled, description, events. The secret does not change.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The form's id, as shown in the dashboard and in the form's endpoint URL
The webhook's id, from the list or from the response that created it
Body
Response
"whk_3f9Kq2bLm8xZpQ1rT7vWc0"
"https://example.com/hooks/formcarry"
"CRM sync"
How deliveries are signed: an HMAC-SHA256 of "." with the secret, sent as "t=,v1=" in this header. Recompute it over the raw body you received, compare in constant time, and refuse a timestamp older than a few minutes. Retries are signed again with a fresh timestamp.
Always null: the delivery log is the record, at GET .../webhooks/{webhook_id}/deliveries.
"2026-09-13T12:00:00.000Z"