Skip to main content
PATCH
Update webhook

Authorizations

Authorization
string
header
required

HS256-signed JWT bearer token, obtained via the OAuth2 client-credentials grant (see Authentication).

Path Parameters

id
string
required

Body

application/json

Update attributes

events
enum<string>[]

Event types this endpoint is subscribed to. Must contain at least one.

Minimum array length: 1
Available options:
decision.allow,
decision.block,
decision.review,
decision.provisional,
decision.async.allow,
decision.async.block,
decision.async.review
url
string<uri>

HTTPS URL that Specter delivers event notifications to.

Example:

"https://merchant.com.example/webhooks/specter"

Response

Updated webhook

id
string<uuid>
Example:

"2f8d4b6c-9e1a-4c7f-b3d5-8a6e2c9f4b1d"

events
string[]
Example:
inserted_at
string<date-time>
Example:

"2026-01-20T08:30:00Z"

masked_hmac_key
string | null

Masked HMAC key showing only the first 5 characters.

Example:

"abc12xxxxx"

updated_at
string<date-time>
Example:

"2026-01-20T08:30:00Z"

url
string<uri>
Example:

"https://merchant.com.example/webhooks/specter"