Delete an mTLS configuration

Deletes an mTLS configuration. By default the delete is refused while the configuration is still in use: if any webhook references it, nothing is deleted and the request fails with 409 Conflict, naming the reason and listing the ids of the referencing webhooks. This protects a shared configuration from being removed out from under the webhooks that depend on it, since several webhooks may reference the same one.

Pass forceDelete=true to delete anyway. That detaches every referencing webhook — it clears each webhook’s webhookMtlsId, it does not delete the webhook — then deletes the configuration and returns the deleted resource together with detachedWebhookIds. The detached webhooks keep delivering notifications, but without a client certificate, so an endpoint that requires mTLS will reject them from that point on.

When nothing references the configuration the delete succeeds either way, and detachedWebhookIds comes back empty.

Endpoint Permissions: Owner, Admin, Non-Signing Admin.

DELETE

webhooks_settings

mtls

{webhookMtlsId}

TypeScript

const response: Promise<FireblocksResponse<DeleteWebhookMtlsConfigResponse>> = fireblocks.webhooksV2.deleteWebhookMtlsConfig(webhooksV2ApiDeleteWebhookMtlsConfigRequest);

const options = {method: 'DELETE'};

fetch('https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)

response = http.request(request)
puts response.read_body

{
  "id": "44fcead0-7053-4831-a53a-df7fb90d440f",
  "signedCert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
  "expiresAt": 1726108200000,
  "createdAt": 1694572200000,
  "updatedAt": 1726108200000,
  "detachedWebhookIds": [
    "44fcead0-7053-4831-a53a-df7fb90d440f"
  ],
  "name": "Production gateway 2026"
}

{
  "message": "<string>",
  "code": 123
}

{
  "message": "<string>",
  "code": 123
}

Path Parameters

webhookMtlsId

string<uuid>

required

The unique identifier of the mTLS configuration

Example:

"44fcead0-7053-4831-a53a-df7fb90d440f"

Query Parameters

forceDelete

boolean

default:false

Delete the configuration even while webhooks still reference it, detaching those webhooks instead of refusing. Leave it unset, or false, to get a 409 Conflict whenever anything still references the configuration.

Response

The deleted mTLS configuration, plus the ids of any webhooks that were detached from it

The deleted mTLS configuration, plus the ids of any webhooks the delete detached from it. Webhooks are only detached by forceDelete=true; without it a delete is refused with 409 while anything still references the configuration.

string<uuid>

required

The unique identifier of the mTLS configuration, to be set on a webhook.

Example:

"44fcead0-7053-4831-a53a-df7fb90d440f"

signedCert

string

required

The signed client certificate PEM.

Example:

"-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"

expiresAt

integer<int64>

required

When the certificate itself expires, in milliseconds since the epoch.

Example:

1726108200000

createdAt

integer<int64>

required

When the certificate was uploaded, in milliseconds since the epoch.

Example:

1694572200000

updatedAt

integer<int64>

required

When this configuration was last changed, in milliseconds since the epoch. Differs from createdAt once the certificate has been replaced or the configuration renamed.

Example:

1726108200000

detachedWebhookIds

string<uuid>[]

required

Webhooks whose webhookMtlsId was cleared. The webhooks themselves are not deleted and keep delivering, just without a client certificate. Empty unless forceDelete=true detached something.

Example:

["44fcead0-7053-4831-a53a-df7fb90d440f"]

name

string

The label given to this mTLS configuration.

Example:

"Production gateway 2026"

⌘I

TypeScript

const response: Promise<FireblocksResponse<DeleteWebhookMtlsConfigResponse>> = fireblocks.webhooksV2.deleteWebhookMtlsConfig(webhooksV2ApiDeleteWebhookMtlsConfigRequest);

const options = {method: 'DELETE'};

fetch('https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}"

	req, _ := http.NewRequest("DELETE", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fireblocks.io/v1/webhooks_settings/mtls/{webhookMtlsId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)

response = http.request(request)
puts response.read_body

{
  "id": "44fcead0-7053-4831-a53a-df7fb90d440f",
  "signedCert": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
  "expiresAt": 1726108200000,
  "createdAt": 1694572200000,
  "updatedAt": 1726108200000,
  "detachedWebhookIds": [
    "44fcead0-7053-4831-a53a-df7fb90d440f"
  ],
  "name": "Production gateway 2026"
}

{
  "message": "<string>",
  "code": 123
}

{
  "message": "<string>",
  "code": 123
}

Introduction

Errors & Statuses

Data Objects

API Endpoints

Delete an mTLS configuration

Path Parameters

Query Parameters

Response