path idstringrequiredwhk_…).body urlstringbody eventTypesstring[]400). Pass null to clear it (deliver all types).body enabledbooleanfalse) or resume (true) delivery. Pausing does not drop events — events that occur while paused are queued and delivered when you re-enable.body rotateSecretbooleansecret in the response. The previous secret stays valid for a short rollover window so in-flight deliveries still verify. (To set a specific secret, create a new destination.)body namestringsandboxId (scope) is immutable — set it at create; it can't be changed here. The current signing secret is re-fetchable any time via GET /api/webhooks/{id}/secret.1234567891011{ "id": "whk_3f9a2c", "name": "prod", "url": "https://app.example.com/oc-webhook", "eventTypes": ["sandbox.stopped", "sandbox.ready"], "sandboxId": null, "enabled": true, "hasSecret": true, "createdAt": "2026-06-24T12:00:00Z", "updatedAt": "2026-06-24T12:05:00Z" }