Skip to main content
Disable a webhook subscription in the authenticated owner scope.

Endpoint

POST /v3/webhooks/delete

Authentication and target

Access is resolved through the authenticated credential owner. Account credentials can target only their own account. User credentials must supply account_number for transaction events and omit it for VA Account KYB. Platform credentials can manage only Master Account KYB and must omit account_number. See Webhook Management for the complete event/owner matrix. Do not send X-ISPB or X-Account-Number with a platform or user credential. An account credential may omit both headers; if sent, both are required and must match its bound account.

Request body

Success data

webhook_id and deleted_at (Unix milliseconds).

Behavior and validation

Deletion is implemented as disabling the configuration; it does not physically erase the record. The request has no caller-supplied idempotency key.

Errors

Every call can fail for missing or invalid signature headers, an expired timestamp, nonce replay, an invalid body hash or signature, insufficient permission, or a downstream service error. Endpoint-specific errors include:
  • field_required for missing required context.
  • permission_denied for an unsupported owner/event/account combination.
  • not_found when the subscription is not visible.

Example request

Example response