Update pull endpoint

PATCH

/v1/pull-endpoints/{id}

curl --request PATCH \
  --url https://api.hookbridge.io/v1/pull-endpoints/01935abc-def0-7123-4567-890abcdef012 \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "name": "example", "description": "example", "retention_days": 1, "event_type_source": "body", "event_type_path": "example", "verify_static_token": true, "token_header_name": "example", "token_query_param": "example", "token_value": "example", "verify_hmac": true, "hmac_header_name": "example", "hmac_signature_encoding": "hex", "hmac_secret": "example", "timestamp_header_name": "example", "timestamp_ttl_seconds": 1, "verify_ip_allowlist": true, "allowed_cidrs": [ "example" ], "idempotency_header_names": [ "example" ], "ingest_response_code": 1 }'

• Production

Update pull endpoint configuration. Only provided fields are updated.

Authorizations

• BearerAuth

Parameters

Path Parameters

id

required

string format: uuid

Pull endpoint identifier (UUIDv7)

Example

01935abc-def0-7123-4567-890abcdef012

Request Body^required

Media typeapplication/json

Partial update — only provided fields are changed.

object

name

string

<= 255 characters

description

string

<= 500 characters

retention_days

integer

>= 1

event_type_source

Set to empty string to clear event type extraction.

string

Allowed values: body header ""

event_type_path

string

<= 256 characters

verify_static_token

boolean

token_header_name

string

token_query_param

string

token_value

string

>= 16 characters

verify_hmac

boolean

hmac_header_name

string

hmac_signature_encoding

How the HMAC signature header value is encoded. Use base64 for providers that send a base64 signature (for example Shopify’s X-Shopify-Hmac-Sha256); hex for hex-encoded signatures. Base64 is standard RFC 4648 with padding. Only used when verify_hmac is true. Omit to leave unchanged.

string

Allowed values: hex base64

hmac_secret

string

timestamp_header_name

string

timestamp_ttl_seconds

integer

verify_ip_allowlist

boolean

allowed_cidrs

Array<string>

idempotency_header_names

Array<string>

ingest_response_code

integer

>= 200 <= 299

Responses

200

Pull endpoint updated

Media typeapplication/json

object

data

object

id

required

string format: uuid

name

string

description

string

mode

required

string

Allowed values: pull

ingest_url

required

URL to give to your webhook provider. Does not include the secret token suffix.

string format: uri

active

required

Whether the endpoint is active (not deleted).

boolean

paused

required

boolean

retention_days

integer

nullable

event_type_source

string

Allowed values: body header

event_type_path

string

counts

Event counts (only on single-endpoint GET, not list)

object

stored

integer

fetched

integer

delivered

integer

total

integer

verify_static_token

boolean

token_header_name

string

token_query_param

string

verify_hmac

boolean

hmac_header_name

string

hmac_signature_encoding

How the HMAC signature header value is encoded (hex or base64). Only used when verify_hmac is true.

string

default: hex

Allowed values: hex base64

timestamp_header_name

string

timestamp_ttl_seconds

integer

nullable

verify_ip_allowlist

boolean

allowed_cidrs

Array<string>

ingest_response_code

integer

idempotency_header_names

Array<string>

created_at

required

string format: date-time

updated_at

required

string format: date-time

meta

object

request_id

Unique identifier for this request (useful for support)

string

Example

{
  "data": {
    "mode": "pull",
    "event_type_source": "body",
    "hmac_signature_encoding": "hex"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

400

Invalid request

Media typeapplication/json

object

error

object

code

Machine-readable error code

string

message

Human-readable error message

string

meta

object

request_id

Unique identifier for this request (useful for support)

string

Examples

Endpoint not found

{
  "error": {
    "code": "ENDPOINT_NOT_FOUND",
    "message": "endpoint not found"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

Invalid endpoint ID format

{
  "error": {
    "code": "INVALID_REQUEST",
    "message": "endpoint_id must be in format ep_xxx"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

Invalid payload

{
  "error": {
    "code": "INVALID_REQUEST",
    "message": "payload must be valid JSON"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

Invalid headers

{
  "error": {
    "code": "INVALID_HEADERS",
    "message": "header 'Host' is forbidden and cannot be overridden"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

401

Unauthorized - Invalid or missing API key

Media typeapplication/json

object

error

object

code

Machine-readable error code

string

message

Human-readable error message

string

meta

object

request_id

Unique identifier for this request (useful for support)

string

Example

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or missing API key"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}

404

Resource not found

Media typeapplication/json

object

error

object

code

Machine-readable error code

string

message

Human-readable error message

string

meta

object

request_id

Unique identifier for this request (useful for support)

string

Example

{
  "error": {
    "code": "NOT_FOUND",
    "message": "Message not found"
  },
  "meta": {
    "request_id": "req_xyz123"
  }
}