curl -X PATCH 'https://api.github.com/repos/example-owner/example-repo/hooks/10/config' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

# PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Update a webhook configuration for a repository

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PATCH 'https://api.github.com/repos/example-owner/example-repo/hooks/10/config' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| owner | path | string | Yes | The account owner of the repository. The name is not case sensitive. |
| repo | path | string | Yes | The name of the repository without the `.git` extension. The name is not case... |
| hook_id | path | integer | Yes | The unique identifier of the hook. You can find this value in the `X-GitHub-H... |
| url | body | string | No | The URL to which the payloads will be delivered. |
| content_type | body | string | No | The media type used to serialize the payloads. Supported values include `json... |
| secret | body | string | No | If provided, the `secret` will be used as the `key` to generate the HMAC hex... |
| insecure_ssl | body | string | No | Determines whether the SSL certificate of the host for `url` will be verified... |

## Response example
{"url":"https://example.com/webhook","content_type":"\"json\""}

---
Need an API key? Get one at https://github.com/settings/tokens

PATCH

PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Update a webhook configuration for a repository

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 362 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PATCH 'https://api.github.com/repos/example-owner/example-repo/hooks/10/config' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{}'

Parameters

Name	In	Type	Required	Description
owner	path	string	Yes	The account owner of the repository. The name is not case sensitive.
repo	path	string	Yes	The name of the repository without the `.git` extension. The name is not case sensitive.
hook_id	path	integer	Yes	The unique identifier of the hook. You can find this value in the `X-GitHub-Hook-ID` header of a webhook delivery.
url	body	string	No	The URL to which the payloads will be delivered.
content_type	body	string	No	The media type used to serialize the payloads. Supported values include `json` and `form`. The default is `form`.
secret	body	string	No	If provided, the `secret` will be used as the `key` to generate the HMAC hex digest value for [delivery signature headers](https://docs.github.com/webhooks/event-payloads/#delivery-headers).
insecure_ssl	body	string	No	Determines whether the SSL certificate of the host for `url` will be verified when delivering payloads. Supported values include `0` (verification is performed) and `1` (verification is not performed). The default is `0`. We strongly recommend not setting this to `1` as you are subject to man-in-the-middle and other attacks.

Response 200 OK

{
  "url": "https://example.com/webhook",
  "content_type": "\"json\"",
  "secret": "\"********\"",
  "insecure_ssl": "\"0\""
}

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.