> ## Documentation Index
> Fetch the complete documentation index at: https://docs.0xinsider.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Delete Webhook

> Soft-deletes a webhook destination owned by the authenticated API key user. Existing delivery audit rows remain retained.

Permanently remove a webhook. No further events are delivered to that URL, and the signing secret is invalidated.

```bash theme={null}
curl -X DELETE \
  -H "Authorization: Bearer $OXINSIDER_API_KEY" \
  -H "Idempotency-Key: webhook-delete-2026-06-01" \
  "https://api.0xinsider.com/api/v1/webhooks/42"
```

To pause deliveries without losing the webhook, [update](/api-reference/endpoint/update-webhook) it to `enabled: false` instead.

Send `Idempotency-Key` when retrying a delete. A matching retry returns the original response instead of deleting again.


## OpenAPI

````yaml DELETE /api/v1/webhooks/{id}
openapi: 3.1.0
info:
  title: 0xinsider API
  description: >-
    Find your edge on Polymarket and Kalshi. Every wallet graded, every trade
    scored, every outlier flagged. API exposes trader grades, whale trades,
    smart money signals, and insider detection for AI agents, trading bots, and
    research tools. Normal API requests use a 30-second server timeout that
    returns HTTP 408 Request Timeout with an empty body when exceeded. Public
    REST /api/v1/* endpoints, excluding /api/v1/mcp, use Bearer-token based
    non-credentialed browser CORS: any Origin may call with Authorization,
    Content-Type, If-None-Match, Idempotency-Key, and Mcp-Session-Id request
    headers. Remote MCP at /api/v1/mcp is non-credentialed, but still validates
    Origin against the 0xinsider/localhost allowlist per MCP Streamable HTTP
    DNS-rebinding guidance. Successful browser CORS preflight responses
    advertise Access-Control-Max-Age: 86400. Browser JavaScript may read
    X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After,
    ETag, X-Request-Id, X-Request-Cost, X-Batch-RateLimit-Limit,
    X-Batch-RateLimit-Remaining, X-Batch-RateLimit-Reset, Mcp-Session-Id, and
    X-Mcp-Error-Code response headers. Credentialed first-party routes such as
    /api/keys, /api/billing, and auth endpoints remain restricted to configured
    0xinsider origins.
  version: 1.0.0
  contact:
    name: 0xinsider
    email: support@0xinsider.com
    url: https://0xinsider.com
servers:
  - url: https://api.0xinsider.com
    description: >-
      Production (live data). Authenticate with a live key (oxi_sk_live_...);
      requires an active Insider subscription.
  - url: https://api.0xinsider.com
    description: >-
      Sandbox / test mode (deterministic fixture data, no live rows).
      Authenticate with a test key (oxi_sk_test_...) on a free account. Same
      base URL and paths as production: the key class selects live vs sandbox.
      Test keys are billing-exempt, served from a fixed fixture dataset, and
      never read live data or persist writes; webhooks, usage, and MCP responses
      show the response shape only.
security:
  - bearerAuth: []
tags:
  - name: Traders
    description: Trader intelligence, batch lookups, timelines, and export readiness.
  - name: Positions
    description: Current prediction-market position snapshots from backend-owned mirrors.
  - name: Large Positions
    description: Largest current open positions from graded traders (Polymarket-only).
  - name: Whale Trades
    description: Recent and historical large trade intelligence.
  - name: Leaderboard
    description: Ranked trader discovery and category/strategy leaderboards.
  - name: Markets
    description: Market search, discovery, snapshots, and smart-score flow.
  - name: Insider Radar
    description: Suspicious trading pattern detection.
  - name: Events
    description: Durable public event replay streams.
  - name: Streaming
    description: Resumable real-time Server-Sent Events stream of live feed envelopes.
  - name: Webhooks
    description: Signed builder webhook destinations and delivery controls.
  - name: Usage
    description: Developer API budget and usage introspection.
  - name: System
    description: Health and operational status checks.
  - name: MCP
    description: Remote Model Context Protocol transport.
  - name: Reports
    description: Daily, weekly, monthly, and trader export report snapshots.
paths:
  /api/v1/webhooks/{id}:
    delete:
      tags:
        - Webhooks
      summary: Disable a builder webhook destination
      description: >-
        Soft-deletes a webhook destination owned by the authenticated API key
        user. Existing delivery audit rows remain retained.
      operationId: deleteWebhook
      parameters:
        - $ref: '#/components/parameters/WebhookId'
        - $ref: '#/components/parameters/IdempotencyKey'
      responses:
        '200':
          $ref: '#/components/responses/WebhookObject'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '402':
          $ref: '#/components/responses/SubscriptionRequired'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '408':
          $ref: '#/components/responses/RequestTimeout'
        '409':
          $ref: '#/components/responses/IdempotencyInProgress'
        '422':
          $ref: '#/components/responses/IdempotencyConflict'
        '423':
          $ref: '#/components/responses/Locked'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
        '503':
          $ref: '#/components/responses/RateLimitUnavailable'
      x-codeSamples:
        - lang: curl
          label: cURL
          source: |-
            curl -sS \
              -X DELETE \
              -H 'Authorization: Bearer $OXI_SK' \
              'https://api.0xinsider.com/api/v1/webhooks/{id}'
components:
  parameters:
    WebhookId:
      name: id
      in: path
      required: true
      description: Webhook endpoint id owned by the authenticated API key user.
      schema:
        type: integer
        format: int64
    IdempotencyKey:
      name: Idempotency-Key
      in: header
      required: false
      description: >-
        Optional safe-retry key. Reuse the same value only when retrying the
        exact same mutation request body; a different body returns 422 and an
        in-flight matching request returns 409.
      schema:
        type: string
        minLength: 1
        maxLength: 255
      example: wh_idem_01HX7Y9ZQ4K7Z0Q2E4N6A8C1BF
  responses:
    WebhookObject:
      description: Webhook destination
      content:
        application/json:
          schema:
            type: object
            required:
              - object
              - data
              - meta
            properties:
              object:
                type: string
                const: webhook
              data:
                $ref: '#/components/schemas/WebhookEndpoint'
              meta:
                $ref: '#/components/schemas/ResponseMeta'
    Unauthorized:
      description: Missing or invalid API key
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    SubscriptionRequired:
      description: Active Insider subscription required
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    Forbidden:
      description: Account access denied
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    RequestTimeout:
      description: >-
        Request exceeded the server's 30-second transport timeout. The timeout
        response has an empty body because it is generated before handler-level
        JSON error shaping.
    IdempotencyInProgress:
      description: >-
        An Idempotency-Key request with the same body is still in progress.
        Retry shortly with the same key and body.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          examples:
            in_progress:
              summary: Idempotency request still in progress
              value:
                object: error
                error:
                  code: bad_request
                  message: Idempotency-Key request is still in progress; retry shortly
                  param: Idempotency-Key
                meta:
                  request_id: req_example
                  cached: false
    IdempotencyConflict:
      description: The Idempotency-Key was already used with a different request body.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
          examples:
            different_body:
              summary: Idempotency key reused with a different body
              value:
                object: error
                error:
                  code: bad_request
                  message: Idempotency-Key already used with a different request body
                  param: Idempotency-Key
                meta:
                  request_id: req_example
                  cached: false
    Locked:
      description: Account is locked
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    RateLimited:
      description: >-
        Rate limit exceeded (100 req/min; batch endpoints also reserve 100 batch
        item units/min before execution)
      headers:
        Retry-After:
          description: Seconds until rate limit resets.
          schema:
            type: integer
        X-RateLimit-Limit:
          schema:
            type: integer
        X-RateLimit-Remaining:
          schema:
            type: integer
        X-RateLimit-Reset:
          schema:
            type: integer
        X-Request-Id:
          schema:
            type: string
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    InternalError:
      description: Unexpected server error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
    RateLimitUnavailable:
      description: >-
        Redis-backed authenticated rate limiter unavailable; retry after the
        per-process outage cooldown
      headers:
        Retry-After:
          description: >-
            Seconds until the middleware will probe the Redis-backed rate
            limiter again.
          schema:
            type: integer
        X-Request-Id:
          schema:
            type: string
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiError'
  schemas:
    WebhookEndpoint:
      type: object
      required:
        - id
        - object
        - name
        - url
        - event_types
        - status
        - verification_token_expires_at
        - failure_count
        - created_at
        - updated_at
        - retry_policy
      properties:
        id:
          type: integer
          format: int64
        object:
          type: string
          const: webhook
        name:
          type: string
        url:
          type: string
          format: uri
        event_types:
          type: array
          items:
            $ref: '#/components/schemas/WebhookEventType'
        status:
          $ref: '#/components/schemas/WebhookStatus'
        verified_at:
          type: string
          format: date-time
          nullable: true
        verification_token_expires_at:
          type: string
          format: date-time
        failure_count:
          type: integer
        created_at:
          type: string
          format: date-time
        updated_at:
          type: string
          format: date-time
        retry_policy:
          $ref: '#/components/schemas/WebhookRetryPolicy'
        signing_secret:
          type: string
          description: Returned only on create or rotate-secret.
        verification:
          $ref: '#/components/schemas/WebhookVerification'
    ResponseMeta:
      type: object
      required:
        - request_id
        - cached
      properties:
        request_id:
          type: string
          description: Unique request ID (req_ prefix).
        cached:
          type: boolean
        cache_age_s:
          type: integer
          nullable: true
          description: Cache age in seconds, null if not cached.
    ApiError:
      type: object
      required:
        - object
        - error
        - meta
      properties:
        object:
          type: string
          const: error
        error:
          type: object
          required:
            - code
            - message
          properties:
            code:
              type: string
              enum:
                - bad_request
                - invalid_api_key
                - subscription_required
                - forbidden
                - not_found
                - account_locked
                - rate_limited
                - rate_limit_unavailable
                - internal_error
            message:
              type: string
            doc_url:
              type: string
              nullable: true
            param:
              type: string
              nullable: true
        meta:
          $ref: '#/components/schemas/ResponseMeta'
    WebhookEventType:
      type: string
      enum:
        - whale_trades_inserted
        - live_sports_updated
        - whale_trader_synced
        - large_positions_updated
    WebhookStatus:
      type: string
      enum:
        - pending_verification
        - active
        - disabled
    WebhookRetryPolicy:
      type: object
      required:
        - max_attempts
        - terminal_status
      properties:
        max_attempts:
          type: integer
          const: 8
        terminal_status:
          type: string
          const: dead_letter
    WebhookVerification:
      type: object
      required:
        - token
        - expires_at
      properties:
        token:
          type: string
          description: One-time verification token returned only on create or URL change.
        expires_at:
          type: string
          format: date-time
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        API key: Authorization: Bearer oxi_sk_live_... for live data (requires
        an active Insider subscription), or oxi_sk_test_... for sandbox/test
        mode (free account, deterministic fixture data, no live rows). Both key
        classes use the same paths; the prefix selects live vs sandbox.

````