Update a webhook
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Body
Empty means subscribe to every event.
Stable dotted wire-format name for an outbound event.
customer.enrolled, customer.unenrolled, customer.anonymized, customer.group_changed, wallet.installed, card.scanned, card.expired, referral.created, transaction.created, coupon.redeemed, reward.redeemed, tier.changed, ticket.purchased, ticket.cancelled, ticket.refunded, gift.purchased, gift.redeemed, multipass.purchased, membership.purchased, membership.renewed, membership.cancelled, feedback.submitted, automation.fired, broadcast.sent, booking.created, booking.confirmed, booking.attended, booking.no_show, booking.cancelled, webhook.test Set null to clear the card filter.
Filter delivery by live/test activity before creating an outbound attempt. all preserves the default generic-webhook behaviour.
all, live, test May be repeated unchanged; changing it returns HTTP 409. Delete and recreate the subscription instead.
client_hmac, server_attested Response
OK
Empty means subscribe to every event.
Stable dotted wire-format name for an outbound event.
customer.enrolled, customer.unenrolled, customer.anonymized, customer.group_changed, wallet.installed, card.scanned, card.expired, referral.created, transaction.created, coupon.redeemed, reward.redeemed, tier.changed, ticket.purchased, ticket.cancelled, ticket.refunded, gift.purchased, gift.redeemed, multipass.purchased, membership.purchased, membership.renewed, membership.cancelled, feedback.submitted, automation.fired, broadcast.sent, booking.created, booking.confirmed, booking.attended, booking.no_show, booking.cancelled, webhook.test Optional card filter applied before a delivery is created. Null receives matching events from every card.
Filter delivery by live/test activity before creating an outbound attempt. all preserves the default generic-webhook behaviour.
all, live, test Immutable authenticity contract. client_hmac exposes the signing
secret once so the receiver verifies the exact raw body.
OAuth-only server_attested keeps that secret inside Perkstar and
verifies the parsed event through the delivery-verification endpoint.
client_hmac, server_attested 
