Update a webhook

PATCH

/webhooks/{id}

using System.Net.Http.Headers;
var client = new HttpClient();
var request = new HttpRequestMessage
{
    Method = HttpMethod.Patch,
    RequestUri = new Uri("https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"),
    Headers =
    {
        { "Authorization", "Bearer <token>" },
    },
    Content = new StringContent("{ \"name\": \"example\", \"triggers\": [ \"example\" ], \"endpoint\": \"https://example.com\", \"status\": \"active\", \"customHeaders\": [ { \"name\": \"example\", \"value\": \"example\" } ], \"retryPolicy\": { \"enabled\": true, \"maxAttempts\": 1, \"backoff\": \"exponential\", \"initialDelaySeconds\": 1, \"maxDelaySeconds\": 1, \"retryOn\": [ \"timeout\" ] }, \"failureHandling\": { \"autoDisableAfter\": 1, \"disableOnGone\": true } }")
    {
        Headers =
        {
            ContentType = new MediaTypeHeaderValue("application/json")
        }
    }
};
using (var response = await client.SendAsync(request))
{
    response.EnsureSuccessStatusCode();
    var body = await response.Content.ReadAsStringAsync();
    Console.WriteLine(body);
}

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io"
)

func main() {

  url := "https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"

  payload := strings.NewReader("{ \"name\": \"example\", \"triggers\": [ \"example\" ], \"endpoint\": \"https://example.com\", \"status\": \"active\", \"customHeaders\": [ { \"name\": \"example\", \"value\": \"example\" } ], \"retryPolicy\": { \"enabled\": true, \"maxAttempts\": 1, \"backoff\": \"exponential\", \"initialDelaySeconds\": 1, \"maxDelaySeconds\": 1, \"retryOn\": [ \"timeout\" ] }, \"failureHandling\": { \"autoDisableAfter\": 1, \"disableOnGone\": true } }")

  req, _ := http.NewRequest("PATCH", url, payload)

  req.Header.Add("Authorization", "Bearer <token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

OkHttpClient client = new OkHttpClient();

MediaType mediaType = MediaType.parse("application/json");
RequestBody body = RequestBody.create(mediaType, "{ \"name\": \"example\", \"triggers\": [ \"example\" ], \"endpoint\": \"https://example.com\", \"status\": \"active\", \"customHeaders\": [ { \"name\": \"example\", \"value\": \"example\" } ], \"retryPolicy\": { \"enabled\": true, \"maxAttempts\": 1, \"backoff\": \"exponential\", \"initialDelaySeconds\": 1, \"maxDelaySeconds\": 1, \"retryOn\": [ \"timeout\" ] }, \"failureHandling\": { \"autoDisableAfter\": 1, \"disableOnGone\": true } }");
Request request = new Request.Builder()
  .url("https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0")
  .patch(body)
  .addHeader("Authorization", "Bearer <token>")
  .addHeader("Content-Type", "application/json")
  .build();

Response response = client.newCall(request).execute();

const url = 'https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0';
const options = {
  method: 'PATCH',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: '{"name":"example","triggers":["example"],"endpoint":"https://example.com","status":"active","customHeaders":[{"name":"example","value":"example"}],"retryPolicy":{"enabled":true,"maxAttempts":1,"backoff":"exponential","initialDelaySeconds":1,"maxDelaySeconds":1,"retryOn":["timeout"]},"failureHandling":{"autoDisableAfter":1,"disableOnGone":true}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

use std::str::FromStr;
use serde_json::json;
use reqwest;

#[tokio::main]
pub async fn main() {
    let url = "https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0";

    let payload = json!({
        "name": "example",
        "triggers": ("example"),
        "endpoint": "https://example.com",
        "status": "active",
        "customHeaders": (
            json!({
                "name": "example",
                "value": "example"
            })
        ),
        "retryPolicy": json!({
            "enabled": true,
            "maxAttempts": 1,
            "backoff": "exponential",
            "initialDelaySeconds": 1,
            "maxDelaySeconds": 1,
            "retryOn": ("timeout")
        }),
        "failureHandling": json!({
            "autoDisableAfter": 1,
            "disableOnGone": true
        })
    });

    let mut headers = reqwest::header::HeaderMap::new();
    headers.insert("Authorization", "Bearer <token>".parse().unwrap());
    headers.insert("Content-Type", "application/json".parse().unwrap());

    let client = reqwest::Client::new();
    let response = client.request(reqwest::Method::from_str("PATCH").unwrap(), url)
        .headers(headers)
        .json(&payload)
        .send()
        .await;

    let results = response.unwrap()
        .json::<serde_json::Value>()
        .await
        .unwrap();

    dbg!(results);
}

curl --request PATCH \
  --url https://api.vendorica.com/v1/webhooks/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0 \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "name": "example", "triggers": [ "example" ], "endpoint": "https://example.com", "status": "active", "customHeaders": [ { "name": "example", "value": "example" } ], "retryPolicy": { "enabled": true, "maxAttempts": 1, "backoff": "exponential", "initialDelaySeconds": 1, "maxDelaySeconds": 1, "retryOn": [ "timeout" ] }, "failureHandling": { "autoDisableAfter": 1, "disableOnGone": true } }'

Patch name / triggers / endpoint / status (active|disabled) / customHeaders / retryPolicy / failureHandling. The two policy objects are partial: an omitted field keeps its current value, and a change applies to deliveries already waiting from their next attempt on. A changed trigger is re-validated against the org’s available set; a changed endpoint is re-validated by the SSRF allow-list. Re-activating a suspended webhook clears its auto-disable bookkeeping. Trigger names are refused on the same terms as on create: 422 VALIDATION_ERROR for a name the catalogue does not publish, 403 for one the plan does not include.

Authorizations

bearerAuth
webhooks:write

Parameters

Path Parameters

required

string format: uuid

Request Body^required

Partial webhook update

application/json

object

name

string

>= 1 characters <= 120 characters

triggers

Array<string>

>= 1 items <= 50 items

endpoint

string format: uri

<= 2048 characters

status

string

Allowed values: active disabled

customHeaders

Array<object>

<= 20 items

object

name

required

string

>= 1 characters <= 128 characters

value

required

string

<= 4096 characters

retryPolicy

object

enabled

boolean

maxAttempts

integer

>= 1 <= 10

backoff

string

Allowed values: exponential fixed

initialDelaySeconds

integer

>= 10 <= 3600

maxDelaySeconds

integer

>= 60 <= 86400

retryOn

Array<string>

<= 6 items

Allowed values: timeout network http_408 http_429 http_5xx http_4xx

failureHandling

object

autoDisableAfter

integer

>= 1 <= 100

disableOnGone

boolean

Responses

200

Success

application/json

object

success

required

boolean

data

required

object

required

string format: uuid

organizationId

required

string format: uuid

name

required

string

triggers

required

Array<string>

endpoint

required

string format: uri

status

required

string

Allowed values: active disabled suspended

apiVersion

required

string

customHeaders

required

Array<object>

object

name

required

string

valueHint

required

string

signing

required

object

enabled

required

boolean

secretHint

required

string | null

retryPolicy

required

object

enabled

required

boolean

maxAttempts

required

integer

backoff

required

string

Allowed values: exponential fixed

initialDelaySeconds

required

integer

maxDelaySeconds

required

integer

retryOn

required

Array<string>

Allowed values: timeout network http_408 http_429 http_5xx http_4xx

failureHandling

required

object

autoDisableAfter

required

integer

disableOnGone

required

boolean

consecutiveFailures

required

integer

lastSuccessAt

required

string | null format: date-time

lastFailureAt

required

string | null format: date-time

disabledReason

required

string | null

createdAt

required

string | null format: date-time

updatedAt

required

string | null format: date-time

timestamp

required

string format: date-time

requestId

string

message

string

Example

{
  "success": true,
  "data": {
    "id": "537208a1-ff83-4899-8629-3a6e8ce6f4de",
    "organizationId": "46cbbdfc-70bc-46da-8117-f79b47bacf4d",
    "name": "string",
    "triggers": [
      "string"
    ],
    "endpoint": "https://example.com",
    "status": "active",
    "apiVersion": "string",
    "customHeaders": [
      {
        "name": "string",
        "valueHint": "string"
      }
    ],
    "signing": {
      "enabled": true,
      "secretHint": "string"
    },
    "retryPolicy": {
      "enabled": true,
      "maxAttempts": 1,
      "backoff": "exponential",
      "initialDelaySeconds": 1,
      "maxDelaySeconds": 1,
      "retryOn": [
        "timeout"
      ]
    },
    "failureHandling": {
      "autoDisableAfter": 1,
      "disableOnGone": true
    },
    "consecutiveFailures": 1,
    "lastSuccessAt": "2026-08-19T09:41:12.004Z",
    "lastFailureAt": "2026-08-19T09:41:12.004Z",
    "disabledReason": "string",
    "createdAt": "2026-08-19T09:41:12.004Z",
    "updatedAt": "2026-08-19T09:41:12.004Z"
  },
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H",
  "message": "string"
}

400

Validation error

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Bad request",
  "code": "BAD_REQUEST",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

401

Unauthorized

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Unauthorized",
  "code": "UNAUTHORIZED",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

403

Forbidden — missing scope

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Forbidden",
  "code": "FORBIDDEN",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

404

Not found

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Resource not found",
  "code": "NOT_FOUND",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

429

Rate limit exceeded

application/json

object

success

required

boolean

error

required

string

code

required

string

details

timestamp

required

string format: date-time

requestId

string

Example

{
  "success": false,
  "error": "Too many requests",
  "code": "TOO_MANY_REQUESTS",
  "timestamp": "2026-08-19T09:41:12.004Z",
  "requestId": "req_01J5X8ZC3K4T7Q9M2W6B0N1V4H"
}

Update a webhook

Authorizations

Parameters

Path Parameters

Request Bodyrequired

Responses

200

Example

400

Example

401

Example

403

Example

404

Example

429

Example

Request Body^required