Delete an mTLS configuration

Deletes an mTLS configuration. By default the delete is refused while the configuration is still in use: if any webhook or OAuth credentials reference it, nothing is deleted and the request fails with 409 Conflict, naming the reason and listing the ids of what references it. This protects a shared configuration from being removed out from under the webhooks and token requests that depend on it.

Pass forceDelete=true to delete anyway. That detaches everything referencing it — it clears webhookMtlsId on each webhook and OAuth credentials, it does not delete them — then deletes the configuration and returns the deleted resource together with detachedWebhookIds and detachedWebhookOauthIds. Detached webhooks keep delivering notifications, and detached OAuth credentials keep requesting tokens, but without a client certificate, so an endpoint that requires mTLS will reject them from that point on.

When nothing references the configuration the delete succeeds either way, and both lists come back empty.

Endpoint Permissions: Owner, Admin, Non-Signing Admin.

DELETE

webhooks_settings

mtls

{webhookMtlsId}

TypeScript

const response: Promise<FireblocksResponse<DeleteWebhookMtlsConfigResponse>> = fireblocks.webhooksV2.deleteWebhookMtlsConfig(webhooksV2ApiDeleteWebhookMtlsConfigRequest);

const options = {method: 'DELETE'};

fetch('https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)

response = http.request(request)
puts response.read_body

{
  "id": "44fcead0-7053-4831-a53a-df7fb90d440f",
  "signedCert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
  "expiresAt": 1726108200000,
  "createdAt": 1694572200000,
  "updatedAt": 1726108200000,
  "detachedWebhookIds": [
    "44fcead0-7053-4831-a53a-df7fb90d440f"
  ],
  "detachedWebhookOauthIds": [
    "6e5daa9a-56cd-4975-ac16-bb9d1b48dff5"
  ],
  "name": "Production gateway 2026"
}

{
  "message": "<string>",
  "code": 123
}

{
  "message": "<string>",
  "code": 123
}

Path Parameters

webhookMtlsId

string<uuid>

required

The unique identifier of the mTLS configuration

Example:

"44fcead0-7053-4831-a53a-df7fb90d440f"

Query Parameters

forceDelete

boolean

default:false

Delete the configuration even while webhooks or OAuth credentials still reference it, detaching them instead of refusing; their ids are returned in detachedWebhookIds and detachedWebhookOauthIds. Leave it unset, or false, to get a 409 Conflict whenever anything still references the configuration.

Response

The deleted mTLS configuration, plus the ids of any webhooks and OAuth credentials that were detached from it

The deleted mTLS configuration, plus the ids of any webhooks and OAuth credentials the delete detached from it. They are only detached by forceDelete=true; without it a delete is refused with 409 while anything still references the configuration.

string<uuid>

required

The unique identifier of the mTLS configuration, to be set as webhookMtlsId on a webhook or on OAuth credentials.

Example:

"44fcead0-7053-4831-a53a-df7fb90d440f"

signedCert

string

required

The signed client certificate PEM.

Example:

"-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"

expiresAt

integer<int64>

required

When the certificate itself expires, in milliseconds since the epoch.

Example:

1726108200000

createdAt

integer<int64>

required

When the certificate was uploaded, in milliseconds since the epoch.

Example:

1694572200000

updatedAt

integer<int64>

required

When this configuration was last changed, in milliseconds since the epoch. Differs from createdAt once the certificate has been replaced or the configuration renamed.

Example:

1726108200000

detachedWebhookIds

string<uuid>[]

required

Webhooks whose webhookMtlsId was cleared. The webhooks themselves are not deleted and keep delivering, just without a client certificate. Empty unless forceDelete=true detached something.

Example:

["44fcead0-7053-4831-a53a-df7fb90d440f"]

detachedWebhookOauthIds

string<uuid>[]

required

OAuth credentials whose webhookMtlsId was cleared. Their token requests continue without a client certificate. Empty unless forceDelete=true detached something.

Example:

["6e5daa9a-56cd-4975-ac16-bb9d1b48dff5"]

name

string

The label given to this mTLS configuration.

Example:

"Production gateway 2026"

⌘I

TypeScript

const response: Promise<FireblocksResponse<DeleteWebhookMtlsConfigResponse>> = fireblocks.webhooksV2.deleteWebhookMtlsConfig(webhooksV2ApiDeleteWebhookMtlsConfigRequest);

const options = {method: 'DELETE'};

fetch('https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)

response = http.request(request)
puts response.read_body

{
  "id": "44fcead0-7053-4831-a53a-df7fb90d440f",
  "signedCert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
  "expiresAt": 1726108200000,
  "createdAt": 1694572200000,
  "updatedAt": 1726108200000,
  "detachedWebhookIds": [
    "44fcead0-7053-4831-a53a-df7fb90d440f"
  ],
  "detachedWebhookOauthIds": [
    "6e5daa9a-56cd-4975-ac16-bb9d1b48dff5"
  ],
  "name": "Production gateway 2026"
}

{
  "message": "<string>",
  "code": 123
}

{
  "message": "<string>",
  "code": 123
}

Introduction

Errors & Statuses

Data Objects

API Endpoints

Delete an mTLS configuration

Path Parameters

Query Parameters

Response