Skip to main content
Patch a webhook (URL, events, enabled), or delete it permanently. Both actions require the account:manage_integrations permission.

​
Patch a webhook

curl -X PATCH https://app.dacard.ai/api/webhooks/wh_xyz \
  -H "Authorization: Bearer $DACARD_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://hooks.example.com/dacard",
    "events": ["score.completed"],
    "enabled": true
  }'

​
Delete a webhook

curl -X DELETE https://app.dacard.ai/api/webhooks/wh_xyz \
  -H "Authorization: Bearer $DACARD_API_KEY"
PropertyValue
AuthRequired
Required permissionaccount:manage_integrations
IdempotentPATCH yes. DELETE yes (returns 404 on second call).

​
Allowed events

score.completed, subscription.changed. Unknown event names are silently dropped from the array.

​
Body (PATCH)

FieldTypeNotes
urlstringMust start with https://. HTTP rejected.
eventsstring[]Replaces the prior list.
enabledbooleanToggles delivery.
All fields optional. Omitted fields are unchanged.

​
Errors

StatusCodeWhen
400url must be HTTPSURL with http:// scheme.
401AUTH_REQUIREDNo session.
403FORBIDDENCaller lacks account:manage_integrations.
404Not foundWebhook does not exist or belongs to another account.
500INTERNAL_ERRORWrite failed.