Delete Webhook
Delete one webhook endpoint from the current organization and project context.
Endpoint contract
Use the exact method and path shown above. Paths are relative to the API base URL.
Authentication, permission, and scope
| Control | Required contract |
|---|---|
| Authentication | Bearer access token. |
| Permission or scope | webhooks.manage capability and webhooks:write scope. |
| Resource scope | The endpoint must belong to the caller’s organization and active project context. |
Request fields
| Field | Type | Contract |
|---|---|---|
endpoint_id | integer path parameter | ID returned by create or list. |
| Request body | none | No body is accepted. |
Code examples
import osfrom memorysync import ControlPlaneClientclient = ControlPlaneClient(base_url="https://api.memorysync.io",access_token=os.environ["MEMORYSYNC_ACCESS_TOKEN"],)client.delete_webhook(51,project_id=os.environ["MEMORYSYNC_PROJECT_ID"],)
Response shape
- A successful response has status 204 and no JSON body.
- Deletion is audited by the route.
Status outcomes
Read the operation-specific response and persist only fields needed by the task.
Fix invalid path, query, or body fields before trying again.
Refresh authentication or verify the required organization permission and scope.
Treat the resource as unavailable without revealing whether it exists elsewhere.
Use returned retry metadata when present and reconcile uncertain mutations before repeating them.
Production handling
- 01
Authorize
APPConfirm the signed-in principal may perform this product action.
- 02
Validate
INPUTValidate identifiers and body fields before sending the request.
- 03
Call
SDKUse the named ControlPlaneClient method or equivalent HTTPS request from a trusted application context.
- 04
Inspect
RESULTRemove local endpoint state only after confirmed 204.
- 05
Reconcile
SAFEIf the response is uncertain, list webhooks before repeating the destructive action.
Security notes
Required
Keep organization controls inside trusted boundaries.
- Require explicit confirmation.
- Do not reveal cross-organization endpoint existence.
- Remove or disable downstream assumptions about the signing secret after deletion.
Avoid
Do not weaken the route contract in client code.
- Do not expose bearer or refresh tokens in URLs, logs, or public clients.
- Do not accept organization, member, project, or resource IDs without application authorization.
- Do not treat returned data as trusted HTML, prompt instructions, or proof of application authorization.