Endpoint
POST /v3/webhooks/delete
Authentication and target
Access is resolved through the authenticated credential owner. Account credentials can target only their own account. User credentials must supplyaccount_number for transaction events and omit it for VA Account KYB. Platform credentials can manage only Master Account KYB and must omit account_number. See Webhook Management for the complete event/owner matrix.
Do not send X-ISPB or X-Account-Number with a platform or user credential. An account credential may omit both headers; if sent, both are required and must match its bound account.
Request body
Success data
webhook_id and deleted_at (Unix milliseconds).
Behavior and validation
Deletion is implemented as disabling the configuration; it does not physically erase the record. The request has no caller-supplied idempotency key.Errors
Every call can fail for missing or invalid signature headers, an expired timestamp, nonce replay, an invalid body hash or signature, insufficient permission, or a downstream service error. Endpoint-specific errors include:field_requiredfor missing required context.permission_deniedfor an unsupported owner/event/account combination.not_foundwhen the subscription is not visible.