> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.muchau.com.br/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.muchau.com.br/_mcp/server.

# Atualizar um webhook

PUT https://dev.muchau.com.br/api/webhooks/{id}
Content-Type: application/json

Atualiza a URL, eventos ou números associados a um webhook.

Reference: https://docs.muchau.com.br/api/reference/webhooks/atualizar-um-webhook

## Authentication

- `Authorization` header (bearer token, required) — API Key in the format `mk_live_<43-chars>`. Obtain from the Dashboard or `POST /auth/api-keys`.

## Request

### Path parameters

- `id` (string, required) — Unique identifier of the webhook

### Body (application/json)

This endpoint expects an object.

- `url` (string, optional) — New HTTPS endpoint URL for webhook deliveries. Must be a valid URL if provided.
- `events` (list of enum, optional) — Updated list of event types to subscribe to. Replaces the existing event list.
  - Allowed values: `message.received`, `message.sent`, `message.delivered`, `message.read`, `message.failed`, `number.activated`, `number.disconnected`, `number.banned`, `flow.data_exchange`
- `numberIds` (list of string, optional) — Updated list of WhatsApp Business number IDs to filter events for. Set to an empty array to receive events for all numbers.
- `contacts` (list of string, optional) — Updated list of contacts (phone numbers or BSUIDs) to restrict deliveries to. Set to an empty array to reset this webhook to catch-all behavior.
- `active` (boolean, optional) — Whether the webhook is active. Set to true to re-enable a webhook that was auto-disabled after 10 consecutive delivery failures.

## Response

### 200

Default Response

- `id` (string, required) — Unique identifier of the webhook
- `url` (string, required) — HTTPS endpoint URL that receives webhook POST requests
- `events` (list of string, required) — List of event types this webhook is subscribed to
- `numberIds` (list of string, required) — List of number IDs this webhook is filtered to. Empty array means all numbers.
- `contacts` (list of string, required) — List of contacts this webhook is restricted to. Empty array means all contacts (catch-all).
- `active` (boolean, required) — Whether the webhook is currently active. Automatically set to false after 10 consecutive delivery failures.
- `createdAt` (string, required) — ISO 8601 timestamp when the webhook was created
- `failureCount` (double, optional) — Number of consecutive delivery failures. Resets to 0 on a successful delivery. Webhook is auto-disabled at 10.
- `lastStatusCode` (double, optional, nullable) — HTTP status code returned by the endpoint on the most recent delivery attempt
- `lastTriggeredAt` (string, optional, nullable) — ISO 8601 timestamp of the most recent delivery attempt
- `updatedAt` (string, optional) — ISO 8601 timestamp when the webhook was last updated

## Errors

### 400 Bad Request Error

Default Response

- `error` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaError, required)

### 401 Unauthorized Error

Default Response

- `error` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaError, required)

### 404 Not Found Error

Default Response

- `error` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaError, required)

## Types

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaError

- `code` (string, required) — Machine-readable error code (e.g., UNAUTHORIZED, NOT_FOUND, VALIDATION_ERROR)
- `message` (string, required) — Human-readable error description
- `status` (integer, required) — HTTP status code
- `meta` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorMeta, optional)
- `error_shield` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield, optional)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorMeta

- `meta_code` (integer, required)
- `meta_message` (string, required)
- `meta_subcode` (integer, required, nullable)
- `type` (string, required, nullable)
- `fbtrace_id` (string, required, nullable)
- `error_data` (any, optional)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield

- ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield0
- ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield1

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield0

- `matched` (boolean, required)
- `entry_id` (string, required)
- `category` (enum, required)
  - Allowed values: `template`, `number`, `messaging`, `flow`, `permission`, `rate_limit`, `other`
- `severity` (enum, required)
  - Allowed values: `informational`, `recoverable`, `blocking`, `critical`
- `actor` (enum, required)
  - Allowed values: `developer`, `end_client`, `muchau`
- `human_message` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0HumanMessage, required)
- `action` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0Action, required)
- `action_url` (string, required, nullable)
- `docs_url` (string, required)
- `copy_text` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0CopyText, required)
- `version` (integer, required)
- `last_updated` (string, required)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShield1

- `matched` (boolean, required)
- `note` (ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf1Note, required)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0HumanMessage

- `pt` (string, required)
- `en` (string, required)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0Action

- `pt` (string, required)
- `en` (string, required)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf0CopyText

- `pt` (string, required, nullable)
- `en` (string, required, nullable)

### ApiWebhooksIdPutResponsesContentApplicationJsonSchemaErrorErrorShieldOneOf1Note

- `pt` (string, required)
- `en` (string, required)

## Examples

**Request**

```json
{}
```

**Response**

```json
{
  "id": "wh_9f8b7c6d5e4a3b2c1d0e",
  "url": "https://webhooks.example.com/receive",
  "events": [
    "message.received",
    "message.sent",
    "number.activated"
  ],
  "numberIds": [
    "1234567890abcdef",
    "abcdef1234567890"
  ],
  "contacts": [
    "5511998765432",
    "US.13491208655302741918"
  ],
  "active": true,
  "createdAt": "2023-11-01T09:20:00Z",
  "failureCount": 2,
  "lastStatusCode": 200,
  "lastTriggeredAt": "2024-06-10T15:45:30Z",
  "updatedAt": "2024-06-10T15:45:30Z"
}
```

**SDK Code**

```python
import requests

url = "https://dev.muchau.com.br/api/webhooks/id"

payload = {}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.json())
```

```javascript
const url = 'https://dev.muchau.com.br/api/webhooks/id';
const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: '{}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://dev.muchau.com.br/api/webhooks/id"

	payload := strings.NewReader("{}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://dev.muchau.com.br/api/webhooks/id")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{}"

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.put("https://dev.muchau.com.br/api/webhooks/id")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{}")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('PUT', 'https://dev.muchau.com.br/api/webhooks/id', [
  'body' => '{}',
  'headers' => [
    'Authorization' => 'Bearer <token>',
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://dev.muchau.com.br/api/webhooks/id");
var request = new RestRequest(Method.PUT);
request.AddHeader("Authorization", "Bearer <token>");
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = [
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
]
let parameters = [] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://dev.muchau.com.br/api/webhooks/id")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "PUT"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```