Webhooks

Signed outgoing webhooks: endpoints, events, secret rotation, test events, the delivery log and replays.

GET/v1/webhook-deliveries

Webhook delivery log

Newest first, 30 days. Filter by endpoint, by workflow “Send webhook” steps or by status.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

endpoint_idquery: Id
Opaque record id.
sourcequery: "endpoints" | "workflows"
statusquery: WebhookDeliveryStatus
cursorquery: string
limitquery: integer

Response · 200

datarequired: array of WebhookDelivery
metarequired: PageMeta

Request

curl -X GET 'https://api.propzolo.com/v1/webhook-deliveries' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": [
    {
      "id": "cmusrceel0000q7kaafxqi1om",
      "subscription_id": "cmusrceel0000q7kaafxqi1om",
      "kind": "event",
      "event_id": "string",
      "event_type": "string",
      "entity_type": "string",
      "entity_id": "string",
      "status": "pending",
      "attempt": 0,
      "max_attempts": 0,
      "status_code": 0,
      "response_ms": 0,
      "error": "string",
      "request": {},
      "response": {},
      "next_retry_at": "2026-10-06T05:30:00.000Z",
      "delivered_at": "2026-10-06T05:30:00.000Z",
      "last_attempt_at": "2026-10-06T05:30:00.000Z",
      "replay_of_id": "cmusrceel0000q7kaafxqi1om",
      "created_at": "2026-10-06T05:30:00.000Z"
    }
  ],
  "meta": {
    "next_cursor": "string",
    "has_more": true
  }
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/webhook-deliveries/{id}/replay

Replay one delivery

Queues a new delivery of the same event to the same endpoint (re-signed); the original stays in the log.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Response · 202

datarequired: WebhookDelivery
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhook-deliveries/{id}/replay' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "subscription_id": "cmusrceel0000q7kaafxqi1om",
    "kind": "event",
    "event_id": "string",
    "event_type": "string",
    "entity_type": "string",
    "entity_id": "string",
    "status": "pending",
    "attempt": 0,
    "max_attempts": 0,
    "status_code": 0,
    "response_ms": 0,
    "error": "string",
    "request": {},
    "response": {},
    "next_retry_at": "2026-10-06T05:30:00.000Z",
    "delivered_at": "2026-10-06T05:30:00.000Z",
    "last_attempt_at": "2026-10-06T05:30:00.000Z",
    "replay_of_id": "cmusrceel0000q7kaafxqi1om",
    "created_at": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/webhooks

Webhook endpoints and automation subscriptions

Endpoints configured in Settings and the REST hooks Zapier, Make or Pabbly created, with their health.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Response · 200

datarequired: object
data.endpointsrequired: array of WebhookEndpoint
data.planrequired: object
data.plan.endpointsrequired: boolean
data.plan.rest_hooksrequired: boolean
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/webhooks' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "endpoints": [
      {
        "id": "cmusrceel0000q7kaafxqi1om",
        "kind": "endpoint",
        "name": "string",
        "url": "string",
        "events": [
          "string"
        ],
        "api_version": "2026-10-01",
        "trigger": "new_lead",
        "app": "zapier",
        "api_key": {
          "id": "cmusrceel0000q7kaafxqi1om",
          "name": "string",
          "prefix": "string"
        },
        "is_active": true,
        "disabled_reason": "string",
        "disabled_at": "2026-10-06T05:30:00.000Z",
        "failure_count": 0,
        "last_delivery_at": "2026-10-06T05:30:00.000Z",
        "last_success_at": "2026-10-06T05:30:00.000Z",
        "last_failure_at": "2026-10-06T05:30:00.000Z",
        "previous_secret_expires_at": "2026-10-06T05:30:00.000Z",
        "created_by": {
          "id": "cmusrceel0000q7kaafxqi1om",
          "name": "string"
        },
        "created_at": "2026-10-06T05:30:00.000Z",
        "updated_at": "2026-10-06T05:30:00.000Z"
      }
    ],
    "plan": {
      "endpoints": true,
      "rest_hooks": true
    }
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/webhooks

Add a webhook endpoint

A public https URL and the events it receives. The signing secret is in this response only. Growth plan (`api_webhooks`). Needs a recent two-factor check (step-up) for Owner/Admin sessions.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

Idempotency-Keyheader: string
Unique key (a UUID) per logical request. A retry with the same key and body replays the first response for 24 hours (marked Idempotent-Replayed: true); the same key with another body is a 409.

Request body

name: string or null
urlrequired: string
eventsrequired: array of string
api_version: WebhookApiVersion
Dated payload version; additive changes ship without a new one.

Response · 201

datarequired: WebhookEndpointWithSecret
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhooks' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Idempotency-Key: 6c0f1d3e-…' \
  -H 'Content-Type: application/json' \
  -d '{"name":"string","url":"https://example.com/webhooks/propzolo","events":["string"],"api_version":"2026-10-01"}'

Response example

{
  "data": {
    "endpoint": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "kind": "endpoint",
      "name": "string",
      "url": "string",
      "events": [
        "string"
      ],
      "api_version": "2026-10-01",
      "trigger": "new_lead",
      "app": "zapier",
      "api_key": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string",
        "prefix": "string"
      },
      "is_active": true,
      "disabled_reason": "string",
      "disabled_at": "2026-10-06T05:30:00.000Z",
      "failure_count": 0,
      "last_delivery_at": "2026-10-06T05:30:00.000Z",
      "last_success_at": "2026-10-06T05:30:00.000Z",
      "last_failure_at": "2026-10-06T05:30:00.000Z",
      "previous_secret_expires_at": "2026-10-06T05:30:00.000Z",
      "created_by": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string"
      },
      "created_at": "2026-10-06T05:30:00.000Z",
      "updated_at": "2026-10-06T05:30:00.000Z"
    },
    "secret": "string"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/webhooks/events

Events an endpoint can receive

The event catalogue with sample `data`, the signature headers and the retry ladder.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations or settings.view.

Response · 200

datarequired: WebhookEventCatalogue
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/webhooks/events' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "categories": [
      {
        "key": "string",
        "label": "string",
        "events": [
          {
            "key": "string",
            "label": "string",
            "description": "string",
            "sample": {}
          }
        ]
      }
    ],
    "signing": {
      "signature_header": "string",
      "timestamp_header": "string",
      "replay_window_seconds": 0,
      "retry_ladder_minutes": [
        0
      ]
    }
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/webhooks/workflow-secret

Show or rotate the workflow signing secret

Signs the “Send webhook” steps of workflows. Created on first use; `rotate: true` replaces it at once.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Request body

rotate: boolean

Response · 200

datarequired: object
data.secretrequired: string
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhooks/workflow-secret' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"rotate":false}'

Response example

{
  "data": {
    "secret": "string"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

GET/v1/webhooks/{id}

A webhook endpoint

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: WebhookEndpoint
metarequired: object

Request

curl -X GET 'https://api.propzolo.com/v1/webhooks/{id}' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "kind": "endpoint",
    "name": "string",
    "url": "string",
    "events": [
      "string"
    ],
    "api_version": "2026-10-01",
    "trigger": "new_lead",
    "app": "zapier",
    "api_key": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string",
      "prefix": "string"
    },
    "is_active": true,
    "disabled_reason": "string",
    "disabled_at": "2026-10-06T05:30:00.000Z",
    "failure_count": 0,
    "last_delivery_at": "2026-10-06T05:30:00.000Z",
    "last_success_at": "2026-10-06T05:30:00.000Z",
    "last_failure_at": "2026-10-06T05:30:00.000Z",
    "previous_secret_expires_at": "2026-10-06T05:30:00.000Z",
    "created_by": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "created_at": "2026-10-06T05:30:00.000Z",
    "updated_at": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

PATCH/v1/webhooks/{id}

Change, pause or resume a webhook endpoint

REST hooks can only be paused or resumed (the app manages them). Resuming clears the failure count.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Request body

name: string or null
url: string
events: array of string
api_version: WebhookApiVersion
Dated payload version; additive changes ship without a new one.
is_active: boolean

Response · 200

datarequired: WebhookEndpoint
metarequired: object

Request

curl -X PATCH 'https://api.propzolo.com/v1/webhooks/{id}' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"name":"string","url":"https://example.com/webhooks/propzolo","events":["string"],"api_version":"2026-10-01","is_active":true}'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "kind": "endpoint",
    "name": "string",
    "url": "string",
    "events": [
      "string"
    ],
    "api_version": "2026-10-01",
    "trigger": "new_lead",
    "app": "zapier",
    "api_key": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string",
      "prefix": "string"
    },
    "is_active": true,
    "disabled_reason": "string",
    "disabled_at": "2026-10-06T05:30:00.000Z",
    "failure_count": 0,
    "last_delivery_at": "2026-10-06T05:30:00.000Z",
    "last_success_at": "2026-10-06T05:30:00.000Z",
    "last_failure_at": "2026-10-06T05:30:00.000Z",
    "previous_secret_expires_at": "2026-10-06T05:30:00.000Z",
    "created_by": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "name": "string"
    },
    "created_at": "2026-10-06T05:30:00.000Z",
    "updated_at": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

DELETE/v1/webhooks/{id}

Remove a webhook endpoint or subscription

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: object
data.idrequired: Id
Opaque record id.
data.deletedrequired: true
metarequired: object

Request

curl -X DELETE 'https://api.propzolo.com/v1/webhooks/{id}' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "deleted": true
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/webhooks/{id}/rotate-secret

Rotate an endpoint’s signing secret

The new secret is in this response only; the previous one keeps signing next to it for 24 hours.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Response · 200

datarequired: WebhookEndpointWithSecret
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhooks/{id}/rotate-secret' \
  -H 'Authorization: Bearer pz_live_…'

Response example

{
  "data": {
    "endpoint": {
      "id": "cmusrceel0000q7kaafxqi1om",
      "kind": "endpoint",
      "name": "string",
      "url": "string",
      "events": [
        "string"
      ],
      "api_version": "2026-10-01",
      "trigger": "new_lead",
      "app": "zapier",
      "api_key": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string",
        "prefix": "string"
      },
      "is_active": true,
      "disabled_reason": "string",
      "disabled_at": "2026-10-06T05:30:00.000Z",
      "failure_count": 0,
      "last_delivery_at": "2026-10-06T05:30:00.000Z",
      "last_success_at": "2026-10-06T05:30:00.000Z",
      "last_failure_at": "2026-10-06T05:30:00.000Z",
      "previous_secret_expires_at": "2026-10-06T05:30:00.000Z",
      "created_by": {
        "id": "cmusrceel0000q7kaafxqi1om",
        "name": "string"
      },
      "created_at": "2026-10-06T05:30:00.000Z",
      "updated_at": "2026-10-06T05:30:00.000Z"
    },
    "secret": "string"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

POST/v1/webhooks/{id}/test

Posts the sample of one of the endpoint’s events (or `webhook.test`) marked `"test": true`, signed like a real delivery, and returns the attempt. Tests are never retried and do not count towards auto-disable.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Parameters

idpathrequired: Id
Opaque record id.

Request body

event: string or null

Response · 200

datarequired: WebhookDelivery
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhooks/{id}/test' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"event":"string"}'

Response example

{
  "data": {
    "id": "cmusrceel0000q7kaafxqi1om",
    "subscription_id": "cmusrceel0000q7kaafxqi1om",
    "kind": "event",
    "event_id": "string",
    "event_type": "string",
    "entity_type": "string",
    "entity_id": "string",
    "status": "pending",
    "attempt": 0,
    "max_attempts": 0,
    "status_code": 0,
    "response_ms": 0,
    "error": "string",
    "request": {},
    "response": {},
    "next_retry_at": "2026-10-06T05:30:00.000Z",
    "delivered_at": "2026-10-06T05:30:00.000Z",
    "last_attempt_at": "2026-10-06T05:30:00.000Z",
    "replay_of_id": "cmusrceel0000q7kaafxqi1om",
    "created_at": "2026-10-06T05:30:00.000Z"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
404 Not found — records of another company are reported the same way.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

{ "data": [ { "id": "cmusrceel0000q7kaafxqi1om", "subscription_id": "cmusrceel0000q7kaafxqi1om", "kind": "event", "event_id": "string", "event_type": "string", "entity_type": "string", "entity_id": "string", "status": "pending", "attempt": 0, "max_attempts": 0, "status_code": 0, "response_ms": 0, "error": "string", "request": {}, "response": {}, "next_retry_at": "2026-10-06T05:30:00.000Z", "delivered_at": "2026-10-06T05:30:00.000Z", "last_attempt_at": "2026-10-06T05:30:00.000Z", "replay_of_id": "cmusrceel0000q7kaafxqi1om", "created_at": "2026-10-06T05:30:00.000Z" } ], "meta": { "next_cursor": "string", "has_more": true } }

{ "data": { "id": "cmusrceel0000q7kaafxqi1om", "subscription_id": "cmusrceel0000q7kaafxqi1om", "kind": "event", "event_id": "string", "event_type": "string", "entity_type": "string", "entity_id": "string", "status": "pending", "attempt": 0, "max_attempts": 0, "status_code": 0, "response_ms": 0, "error": "string", "request": {}, "response": {}, "next_retry_at": "2026-10-06T05:30:00.000Z", "delivered_at": "2026-10-06T05:30:00.000Z", "last_attempt_at": "2026-10-06T05:30:00.000Z", "replay_of_id": "cmusrceel0000q7kaafxqi1om", "created_at": "2026-10-06T05:30:00.000Z" }, "meta": {} }

{ "data": { "endpoints": [ { "id": "cmusrceel0000q7kaafxqi1om", "kind": "endpoint", "name": "string", "url": "string", "events": [ "string" ], "api_version": "2026-10-01", "trigger": "new_lead", "app": "zapier", "api_key": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string", "prefix": "string" }, "is_active": true, "disabled_reason": "string", "disabled_at": "2026-10-06T05:30:00.000Z", "failure_count": 0, "last_delivery_at": "2026-10-06T05:30:00.000Z", "last_success_at": "2026-10-06T05:30:00.000Z", "last_failure_at": "2026-10-06T05:30:00.000Z", "previous_secret_expires_at": "2026-10-06T05:30:00.000Z", "created_by": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "created_at": "2026-10-06T05:30:00.000Z", "updated_at": "2026-10-06T05:30:00.000Z" } ], "plan": { "endpoints": true, "rest_hooks": true } }, "meta": {} }

curl -X POST 'https://api.propzolo.com/v1/webhooks' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Idempotency-Key: 6c0f1d3e-…' \ -H 'Content-Type: application/json' \ -d '{"name":"string","url":"https://example.com/webhooks/propzolo","events":["string"],"api_version":"2026-10-01"}'

{ "data": { "endpoint": { "id": "cmusrceel0000q7kaafxqi1om", "kind": "endpoint", "name": "string", "url": "string", "events": [ "string" ], "api_version": "2026-10-01", "trigger": "new_lead", "app": "zapier", "api_key": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string", "prefix": "string" }, "is_active": true, "disabled_reason": "string", "disabled_at": "2026-10-06T05:30:00.000Z", "failure_count": 0, "last_delivery_at": "2026-10-06T05:30:00.000Z", "last_success_at": "2026-10-06T05:30:00.000Z", "last_failure_at": "2026-10-06T05:30:00.000Z", "previous_secret_expires_at": "2026-10-06T05:30:00.000Z", "created_by": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "created_at": "2026-10-06T05:30:00.000Z", "updated_at": "2026-10-06T05:30:00.000Z" }, "secret": "string" }, "meta": {} }

{ "data": { "categories": [ { "key": "string", "label": "string", "events": [ { "key": "string", "label": "string", "description": "string", "sample": {} } ] } ], "signing": { "signature_header": "string", "timestamp_header": "string", "replay_window_seconds": 0, "retry_ladder_minutes": [ 0 ] } }, "meta": {} }

POST/v1/webhooks/workflow-secret

Show or rotate the workflow signing secret

Signs the “Send webhook” steps of workflows. Created on first use; `rotate: true` replaces it at once.

Access: Signed-in members only (web or Android session) — not for API keys. Permission settings.integrations.

Request body

rotate: boolean

Response · 200

datarequired: object
data.secretrequired: string
metarequired: object

Request

curl -X POST 'https://api.propzolo.com/v1/webhooks/workflow-secret' \
  -H 'Authorization: Bearer pz_live_…' \
  -H 'Content-Type: application/json' \
  -d '{"rotate":false}'

Response example

{
  "data": {
    "secret": "string"
  },
  "meta": {}
}

Errors

401 No valid session or API key (missing, expired or revoked).
403 The caller lacks the permission, API-key scope or support grant this operation needs.
409 A unique value already exists, a concurrent change won, or the Idempotency-Key is still in use or was sent with a different request.
422 Invalid input; `error.fields` maps field paths to messages.
429 Too many requests; retry after the Retry-After header.
500 Unexpected error; quote `error.request_id` to support.

{ "data": { "id": "cmusrceel0000q7kaafxqi1om", "kind": "endpoint", "name": "string", "url": "string", "events": [ "string" ], "api_version": "2026-10-01", "trigger": "new_lead", "app": "zapier", "api_key": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string", "prefix": "string" }, "is_active": true, "disabled_reason": "string", "disabled_at": "2026-10-06T05:30:00.000Z", "failure_count": 0, "last_delivery_at": "2026-10-06T05:30:00.000Z", "last_success_at": "2026-10-06T05:30:00.000Z", "last_failure_at": "2026-10-06T05:30:00.000Z", "previous_secret_expires_at": "2026-10-06T05:30:00.000Z", "created_by": { "id": "cmusrceel0000q7kaafxqi1om", "name": "string" }, "created_at": "2026-10-06T05:30:00.000Z", "updated_at": "2026-10-06T05:30:00.000Z" }, "meta": {} }

curl -X PATCH 'https://api.propzolo.com/v1/webhooks/{id}' \ -H 'Authorization: Bearer pz_live_…' \ -H 'Content-Type: application/json' \ -d '{"name":"string","url":"https://example.com/webhooks/propzolo","events":["string"],"api_version":"2026-10-01","is_active":true}'