Update a webhook endpoint
Changes the address, description, events, or turns the endpoint on or off. Fields left out keep their value. Turning an endpoint back on starts its failure count again; events missed while it was off are not sent by themselves (replay them).
api_key webhooksAuthorizationBearer <token>A team API key, made by an admin under Settings, API keys. Send it as Authorization: Bearer chk_....
Scope: webhooks
endpoint_id*stringThe endpoint's id.
application/json- body
Changes to an endpoint. Only the fields sent change.
description?|A new note.
"Deploy bot (staging)"enabled?|Turning an endpoint back on starts its failure count again.
trueevents?array<string>|The new subscription list, or ["*"].
[ "*"]url?|A new https:// address.
"https://hooks.example.com/coderhelm/v2"The endpoint as saved.
application/json- response
A webhook endpoint. Never carries its secret.
created_at*stringWhen it was added.
"2026-10-20T09:00:00Z"created_by*stringWho added it.
"lead@example.com"description*stringA note for people: what the endpoint is for.
"Deploy bot"disabled_reason*stringWhy it's off: manual (turned off by a person) or failing (turned
off by CoderHelm after 5 days of failed deliveries). Empty while on.
""enabled*booleanOff: nothing is sent (tests still are).
trueevents*array<string>Event types it receives; ["*"] is every event, including types
added later.
[ "run.completed", "run.failed"]failing_since?|The first failed delivery since the last success.
nullid*stringep_ and a ULID.
"ep_01jbendpt4a7b0c3d6e9f2g5h8"last_failure_at?|The last failed attempt.
"2026-10-25T08:02:11.004Z"last_success_at?|The last delivered attempt.
"2026-10-26T14:31:48.120Z"previous_secret_expires_at?|While a rotated-out secret still signs too, when it stops.
"2026-10-27T09:00:00Z"secret_hint*stringThe last characters of the signing secret.
"whsec_…Q2c="updated_at*stringWhen it last changed.
"2026-10-20T09:00:00Z"url*stringWhere events are POSTed. Always https://.
"https://hooks.example.com/coderhelm"curl -X PUT 'https://api.coderhelm.com/api/webhooks/endpoints/ep_01jbendpt4a7b0c3d6e9f2g5h8' \ -H "Authorization: Bearer $CODERHELM_API_KEY" \ -H 'Content-Type: application/json' \ -d '{}'{ "created_at": "2026-10-20T09:00:00Z", "created_by": "lead@example.com", "description": "Deploy bot", "disabled_reason": "", "enabled": true, "events": [ "run.completed", "run.failed" ], "failing_since": null, "id": "ep_01jbendpt4a7b0c3d6e9f2g5h8", "last_failure_at": "2026-10-25T08:02:11.004Z", "last_success_at": "2026-10-26T14:31:48.120Z", "previous_secret_expires_at": "2026-10-27T09:00:00Z", "secret_hint": "whsec_…Q2c=", "updated_at": "2026-10-20T09:00:00Z", "url": "https://hooks.example.com/coderhelm"}