> For the complete documentation index, see [llms.txt](https://docs.pagsmile.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pagsmile.com/reference/remittance-api/business/webhook/manage-url/update-webhook-url.md).

# Update Webhook URL

Updates an existing callback URL, description, or notification type configuration.

**Endpoint**

`POST /remittance/webhook/update`

**Sandbox base URL:** `https://rem-api-sandbox.pagsmile.com`\
**Content-Type:** `application/json; charset=UTF-8`

The request uses the standard [Remittance API request envelope](https://docs.pagsmile.com/remittance-api/common). The fields below describe the decrypted `biz_data` object.

{% hint style="info" %}
**Requirement:** `M` = Mandatory, `O` = Optional, and `C` = Conditional. A conditional field is mandatory only when the condition stated in its description applies.
{% endhint %}

{% hint style="warning" %}
Encrypt `biz_data`, encrypt the AES key into `random_key`, and sign the request according to the Common request specification.
{% endhint %}

**Request body**

**Decrypted `biz_data` fields**

| Field          | Type        | Requirement | Description                                                                                                                                                                       |
| -------------- | ----------- | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `webhook_id`   | long        | M           | Pagsmile-assigned unique identifier of the configured webhook endpoint.                                                                                                           |
| `webhook_type` | integer     | M           | <p>Type of webhook notification.<br>See <a href="https://docs.pagsmile.com/reference/remittance-api/data/dictionary-item/webhook-type">Webhook Type</a> for supported values.</p> |
| `webhook_url`  | string(128) | M           | HTTPS callback URL to which Pagsmile sends notifications.                                                                                                                         |
| `webhook_desc` | string(128) | O           | Human-readable description used to identify the webhook configuration.                                                                                                            |

**Plaintext `biz_data` example**

{% hint style="info" %}
This example includes mandatory fields and representative optional or conditional fields. Submit fields marked `C` only when the condition in the field description applies.
{% endhint %}

```json
{
  "webhook_id": 100001,
  "webhook_type": 1,
  "webhook_url": "https://www.example.com",
  "webhook_desc": "Example reference"
}
```

**Request example**

```bash
curl --request POST \
  --url https://rem-api-sandbox.pagsmile.com/remittance/webhook/update \
  --header 'Content-Type: application/json; charset=UTF-8' \
  --data '{
    "partner_id": "<your_partner_id>",
    "app_id": "<your_app_id>",
    "timestamp": "2026-07-20 10:30:00",
    "version": "2.0",
    "language": "en",
    "random_key": "<RSA-encrypted AES key>",
    "request_id": "<globally_unique_request_id>",
    "sign_type": "RSA",
    "biz_data": "<AES-encrypted biz_data>"
  }'
```

{% hint style="info" %}
Use the `partner_id` and `app_id` assigned to your integration. The values above are placeholders.
{% endhint %}

**Response**

{% tabs %}
{% tab title="Success" %}
The `data` field in the response envelope is AES-encrypted. Decrypt `random_key` with your RSA private key, then use the resulting AES key to decrypt `data`. See [Security](https://docs.pagsmile.com/remittance-api/security) for implementation details.

**Encrypted response example**

```json
{
  "code": "10000",
  "msg": "Success",
  "data": "<AES-encrypted response data>",
  "random_key": "<RSA-encrypted AES key>",
  "sign_type": "RSA",
  "app_id": "2017051914172236111"
}
```

**Decrypted `data` example**

```json
{
  "webhook_id": 100011
}
```

{% endtab %}

{% tab title="Invalid signature" %}

```json
{
  "code": "40002",
  "msg": "Business Failed",
  "sub_code": "invalid-signature",
  "sub_msg": "invalid signature"
}
```

{% endtab %}
{% endtabs %}

**Response data fields**

| Field        | Type | Requirement | Description                                                             |
| ------------ | ---- | ----------- | ----------------------------------------------------------------------- |
| `webhook_id` | long | O           | Pagsmile-assigned unique identifier of the configured webhook endpoint. |

**Related APIs**

* [Create Webhook URL](https://docs.pagsmile.com/remittance-api/business/webhook/manage-url/create-webhook-url)
* [Manage URL](https://docs.pagsmile.com/remittance-api/business/webhook/manage-url)
* [Query Webhook URL](https://docs.pagsmile.com/remittance-api/business/webhook/manage-url/query-webhook-url)
* [Webhook Common](https://docs.pagsmile.com/remittance-api/business/webhook/webhook-common)