Update webhook subscription

Webhooks

PUT/api/v1/scent/webhooks/{id}

If the URL changes, it is re-validated against the same SSRF guard applied at creation.

Path parameters

idstring (uuid)Required

Body parameters

urlstring (uri)

eventTypesarray of string (enum)

headersobject

Omitted or null = leave your existing custom headers unchanged. A PROVIDED map (including an explicit empty {}) REPLACES the whole set — an empty map clears every custom header. Same limits as create: at most 10 entries, name up to 128 characters, value up to 2048 characters, no CR/LF, and Content-Type/Host/Content-Length/ X-Linra-Signature/X-Linra-Timestamp are reserved.

Response

idstring (uuid)

urlstring (uri)

eventTypesarray of string

isActiveboolean

lastDeliveryAtstring (date-time)

lastDeliveryStatusstring (enum)

Null until the first delivery attempt. DeadLettered means every retry was exhausted — see the Webhooks guide for the retry schedule.

createdAtstring (date-time)

Other responses

400Request validation failed (VALIDATION_ERRORS, with details.errors), or the webhook URL is not allowed — not a valid absolute https URL, its host does not resolve, or it resolves to a private/non-routable address (VALIDATION_WEBHOOK_URL_UNSAFE, details.reason says which).

401No bearer token (UNAUTHORIZED_MISSING_TOKEN), an invalid token (UNAUTHORIZED_INVALID_TOKEN) or an expired one (UNAUTHORIZED_TOKEN_EXPIRED — mint a new token). UPSTREAM_AUTH_FAILED is different: a dependent service refused the Gateway itself. That is a server-side fault — retry later and do NOT re-mint your token. See the Errors guide.

403The route is not available to your credential (FORBIDDEN).

404Unknown subscription.

415The request body is not sent as application/json (UNSUPPORTED_MEDIA_TYPE).

429Too many requests — see the Rate limits guide. Retry after the Retry-After header (seconds).

502A dependent service returned an invalid response (BAD_GATEWAY). Retry with backoff.

503The service is temporarily unavailable (SERVICE_UNAVAILABLE). Retry with backoff.

504A dependent service did not respond in time (GATEWAY_TIMEOUT). Retry with backoff.

cURL

curl --request PUT \
  --url https://api-omni.linra.net/api/v1/scent/webhooks/5b1e3a1c-9d2e-4f3a-8b1c-9f0a2e3d4c5b \
  --header 'Authorization: Bearer $TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{
    "url": "https://your-integration.example.com/webhooks/linra",
    "eventTypes": [
      "order.completed"
    ],
    "headers": {
      "Authorization": "Bearer your-own-inbound-token"
    }
  }'

JavaScript

const res = await fetch('https://api-omni.linra.net/api/v1/scent/webhooks/5b1e3a1c-9d2e-4f3a-8b1c-9f0a2e3d4c5b', {
  method: 'PUT',
  headers: {
    Authorization: `Bearer ${token}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    url: 'https://your-integration.example.com/webhooks/linra',
    eventTypes: [
      'order.completed'
    ],
    headers: {
      Authorization: 'Bearer your-own-inbound-token'
    }
  }),
});
const { payload } = await res.json();

C#

var response = await httpClient.PutAsJsonAsync(
    "https://api-omni.linra.net/api/v1/scent/webhooks/5b1e3a1c-9d2e-4f3a-8b1c-9f0a2e3d4c5b",
    new
    {
        url = "https://your-integration.example.com/webhooks/linra",
        eventTypes = new[]
        {
            "order.completed"
        },
        headers = new
        {
            Authorization = "Bearer your-own-inbound-token"
        }
    });

var envelope = await response.Content.ReadFromJsonAsync<ApiResponse<WebhookSubscriptionPartnerResponse>>();

Response

{
  "state": "SUCCESS",
  "payload": {
    "id": "5b1e3a1c-9d2e-4f3a-8b1c-9f0a2e3d4c5b",
    "url": "https://your-integration.example.com/webhooks/linra",
    "eventTypes": [
      "string"
    ],
    "isActive": true,
    "lastDeliveryAt": "2026-08-22T09:14:03Z",
    "lastDeliveryStatus": "Success",
    "createdAt": "2026-08-22T09:14:03Z"
  },
  "details": null
}