curl -X PATCH 'https://api.github.com/app/hook/config' \
  -H "Authorization: Bearer $GITHUB_APP_JWT" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

# PATCH /app/hook/config (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub App JWT; required.
Request formats: application/json.
Last verified: 2026-10-20

> Update a webhook configuration for an app

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PATCH 'https://api.github.com/app/hook/config' \
  -H "Authorization: Bearer $GITHUB_APP_JWT" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| url | body | string | No | The URL to which the payloads will be delivered. |
| content_type | body | string | No | The media type used to serialize the payloads. Supported values include `json... |
| secret | body | string | No | If provided, the `secret` will be used as the `key` to generate the HMAC hex... |
| insecure_ssl | body | string | No | Determines whether the SSL certificate of the host for `url` will be verified... |

## Response example
{"url":"https://example.com/webhook","content_type":"\"json\""}

---
Need an API key? Get one at https://github.com/settings/tokens

PATCH

PATCH /app/hook/config — GitHub API

GitHub App JWT (required); https://api.github.com

GitHub API

Update a webhook configuration for an app

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 272 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PATCH 'https://api.github.com/app/hook/config' \  -H "Authorization: Bearer $GITHUB_APP_JWT" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{}'

Parameters

Name	In	Type	Required	Description
url	body	string	No	The URL to which the payloads will be delivered.
content_type	body	string	No	The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
secret	body	string	No	If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/webhooks/event-payloads/#delivery-headers).
insecure_ssl	body	string	No	Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.

Response 200 OK

{
  "url": "https://example.com/webhook",
  "content_type": "\"json\"",
  "secret": "\"********\"",
  "insecure_ssl": "\"0\""
}

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.