Obtain an OAuth access token with the `webhook_write` scope.
Identify the `webhookId` of the inactive webhook by calling `GET /webhooks` and filtering results by state.
Send `PUT /webhooks/{webhookId}/state` with the JSON body `{"state": "ACTIVE"}` and the `Authorization: Bearer YOUR_TOKEN` header.
Acrobat Sign will perform a verification request to the webhook URL before activating it; ensure your endpoint correctly returns a 200 response to the verification ping.
Confirm activation by calling `GET /webhooks/{webhookId}` and checking that `status` is `ACTIVE`.
Known gotchas
The endpoint for toggling state is `PUT /webhooks/{webhookId}/state` — not the generic `PUT /webhooks/{webhookId}` (which modifies other properties but cannot be used to change state alone).
If the webhook endpoint fails the verification check during the PUT state call, the state will remain INACTIVE and the API returns an error; ensure your server is reachable and returns 200 to the handshake.
The `webhook_write` scope is mandatory; using a token with only `webhook_read` returns a 403 error.
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp