Skip to main content
PATCH
/
webhooks
/
{id}
Update a webhook
curl --request PATCH \
  --url https://api.polygon.technology/v0.9/webhooks/{id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "enabled": true,
  "events": [
    "<string>"
  ],
  "url": "<string>"
}
'
{
  "complianceOnly": true,
  "createdAt": "2023-11-07T05:31:56Z",
  "enabled": true,
  "events": [
    "<string>"
  ],
  "id": "<string>",
  "secret": "<string>",
  "url": "<string>"
}

Authorizations

​
Authorization
string
header
required

Token from POST /auth/token

Path Parameters

​
id
string
required

Body

application/json
​
enabled
boolean

Set to false to pause deliveries; true to resume them.

​
events
string[]

Replaces the full events subscription. Pass [], ["*"], or ["ALL"] to switch to a wildcard (all events) subscription.

​
url
string

New HTTPS endpoint URL. HTTPS is required in non-local environments.

Response

200 - application/json

The request has succeeded.

​
complianceOnly
boolean
required

When true, this endpoint receives compliance-only events (e.g. underReview) that are excluded from all regular partner webhooks (AML no-tipping-off). Can only be set via the admin API.

​
createdAt
string<date-time>

ISO 8601 UTC timestamp of when the webhook was registered.

​
enabled
boolean

Whether OMS is actively delivering events to this endpoint. Set to false to pause deliveries without deleting the endpoint. OMS also sets this to false automatically if the endpoint returns 410 Gone.

​
events
string[]

Event types this endpoint subscribes to. An empty array means the endpoint receives all event types (wildcard). See the event catalog in the webhook delivery documentation for the full list of valid values.

​
id
string

Unique webhook identifier. Uses the whk_ prefix.

​
object
enum<string>

Resource type discriminator. Always "webhook".

Available options:
webhook
​
secret
string

Signing secret used to verify the Webhook-Signature header on incoming deliveries. Uses the whsec_ prefix (32 cryptographically random bytes, hex-encoded). Returned only on creation - it cannot be retrieved afterward. Store it in your secrets manager immediately.

​
status
enum<string>
Available options:
active,
disabled
​
url
string

HTTPS endpoint that OMS delivers event payloads to.