> ## Documentation Index
> Fetch the complete documentation index at: https://developers.redo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# inboundWebhookUpdate

> Change an inbound webhook's name, verification or dedup path. Returns null when the store has no inbound webhook with that id. Errors with INBOUND_WEBHOOK_INVALID when a setting fails its rules.

**Required scopes:** [`developer_write`](https://developers.redo.com/docs/api-reference/v3/reference/scopes#scope-developer_write)

## Arguments

**id** `ID!` *required*

The inbound webhook's `id`.

**input** `[InboundWebhookUpdateInput!](/docs/api-reference/v3/reference/developer/inbound-webhook-update-input)` *required*

The changes.

**fields**

**dedupPath** `[String!]`

A new dedup path. Null clears it.

**name** `String`

A new name.

**verification** `[InboundWebhookVerificationInput](/docs/api-reference/v3/reference/developer/inbound-webhook-verification-input)`

A new verification. The stored secret must fit its method.

**fields**

**header** `String`

Required for HMAC and SHARED\_SECRET\_HEADER.

**hmacAlgorithm** `[InboundWebhookHmacAlgorithm](/docs/api-reference/v3/reference/developer/inbound-webhook-hmac-algorithm)`

Required for HMAC.

**method** `[InboundWebhookVerificationMethod!](/docs/api-reference/v3/reference/developer/inbound-webhook-verification-method)` *required*

The method.

**signatureEncoding** `[InboundWebhookSignatureEncoding](/docs/api-reference/v3/reference/developer/inbound-webhook-signature-encoding)`

Required for HMAC.

**signaturePrefix** `String`

For HMAC: text before the signature, such as `sha256=`. Defaults to none.

**username** `String`

Required for BASIC\_AUTH.

## Returns

**inboundWebhookUpdate** `[InboundWebhook](/docs/api-reference/v3/reference/developer/inbound-webhook)`

A URL another system sends events to, from Developer › Inbound webhooks. Each verified request can start an automation. The secret is write-only: no field returns it, and `secretSet` says whether one is stored.

**fields**

**createdAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook was created.

**dedupPath** `[String!]`

Field names from the body's root to a value that identifies each event; a repeat is accepted once. Null: Standard Webhooks uses `webhook-id`, other methods treat identical bodies as repeats.

**header** `String`

The header that carries the signature or the shared secret. Set only for HMAC and SHARED\_SECRET\_HEADER.

**hmacAlgorithm** `[InboundWebhookHmacAlgorithm](/docs/api-reference/v3/reference/developer/inbound-webhook-hmac-algorithm)`

The HMAC hash. Set only for HMAC.

**id** `ID!` *required*

The id of this inbound webhook. An inbound webhook trigger names it.

**lastRejectedAt** `[DateTime](/docs/api-reference/v3/reference/common/date-time)`

When a request was last rejected, recorded at most once a minute. Null when none has been.

**lastRejectionReason** `String`

Why the last rejected request was rejected.

**name** `String!` *required*

The inbound webhook's name, unique in the store.

**secretSet** `Boolean!` *required*

Whether a secret is stored. Requests are rejected until one is.

**signatureEncoding** `[InboundWebhookSignatureEncoding](/docs/api-reference/v3/reference/developer/inbound-webhook-signature-encoding)`

How the HMAC signature is written. Set only for HMAC.

**signaturePrefix** `String`

Text before the signature in its header, such as `sha256=`. Set only for HMAC.

**updatedAt** `[DateTime!](/docs/api-reference/v3/reference/common/date-time)` *required*

When the inbound webhook's name, settings, URL or secret last changed.

**url** `String!` *required*

The URL the sender posts to. Its last path segment identifies the endpoint; it doesn't authenticate.

**username** `String`

The basic auth username. Set only for BASIC\_AUTH.

**verificationMethod** `[InboundWebhookVerificationMethod!](/docs/api-reference/v3/reference/developer/inbound-webhook-verification-method)` *required*

How requests are verified.

## Example

```graphql theme={null}
mutation {
  inboundWebhookUpdate(id: "...", input: { ... }) {
    createdAt
    dedupPath
    header
    hmacAlgorithm
    id
    lastRejectedAt
    lastRejectionReason
    name
    # ...
  }
}
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.