Skip to main content
PATCH
cURL
Use this to move a receiver to a new URL, change which events it gets, or pause it. Leave a field out and it keeps its current value. To remove an endpoint for good, use Delete a webhook.

Parameters

A URL that differs only in host case, a trailing dot after the host, or an explicit :443 is not a change, so it does not reset verification. Every successful PATCH sets failure_count back to 0. A URL change that does take effect also cancels a staged secret rotation. Any prepared secret is dropped, and any overlap ends at once, so the endpoint returns to secret_rotation.status idle.
enabled: false moves every delivery still queued for this endpoint to dead_letter, and enabled: true resends none of them. Requeue each one with Redeliver a webhook delivery, or catch up from Event replay.

Example

Handle a 409 or a 422

What it does not do

Authorizations

Authorization
string
header
required

Legacy default or named integration API key, or OAuth 2.1 access token, in the Authorization header as Bearer oxi_sk_live_... or Bearer oxi_at_.... Default keys retain full access; integration keys are limited to their approved read, webhooks, export and usage scopes and expire within 90 days. All credentials share the owner's account limits. Data calls require an active Pro subscription and return live data. A 401 carries WWW-Authenticate: Bearer resource_metadata="https://api.0xinsider.com/.well-known/oauth-protected-resource" (RFC 6750 section 3, RFC 9728).

Headers

X-Query-Validation
enum<string>

Opt into strict query-name validation. The default is compatible: unknown names are ignored and reported in X-Query-Ignored. With strict, an unknown name returns 400 bad_request with error.reason unknown_query_parameter before the handler runs, including when its percent escape is incomplete.

Available options:
strict
Idempotency-Key
string

Optional safe-retry key. Reuse the same value only when retrying the exact same mutation request body; a different body returns 422 and an in-flight matching request returns 409.

Required string length: 1 - 255

Path Parameters

id
integer<int64>
required

Webhook endpoint id owned by the authenticated API key user.

Body

application/json

Webhook fields to replace or preserve.

name
string
Maximum string length: 100
url
string<uri>

Replacement public HTTPS callback URL on the default port 443, validated and checked for uniqueness exactly like the create url. HTTPS scheme/host case, trailing DNS dots and port 443 normalize; path/query case is preserved. Changing it resets status to pending_verification and returns a new verification token; the new destination must pass the verification challenge before deliveries resume.

event_types
enum<string>[]
Minimum array length: 1
Available options:
large_trade_inserted_v2,
large_trades_inserted,
whale_trades_inserted,
live_sports_updated,
trader_synced,
whale_trader_synced,
large_positions_updated,
wallet_grade_changed,
suspicious_trade_flagged,
insider_radar_flag_raised,
sharp_money_flow_detected,
smart_money_flow_detected,
export_job_ready,
export_job_failed,
export_job_expired,
export_job_cancelled
trade_filters
object

All present fields narrow large_trade_inserted_v2 delivery. Grade is observed at publication; ungraded trades do not match min_grade. An empty object matches every large trade.

enabled
boolean

Response

Webhook destination

object
string
required
Allowed value: "webhook"
data
object
required
meta
object
required