diff --git a/notification-channel-config-service-api/src/main/proto/org/hypertrace/notification/config/service/v1/notification_channel.proto b/notification-channel-config-service-api/src/main/proto/org/hypertrace/notification/config/service/v1/notification_channel.proto
index 922d538e..b3fadf76 100644
--- a/notification-channel-config-service-api/src/main/proto/org/hypertrace/notification/config/service/v1/notification_channel.proto
+++ b/notification-channel-config-service-api/src/main/proto/org/hypertrace/notification/config/service/v1/notification_channel.proto
@@ -24,9 +24,15 @@ enum WebhookFormat {
 message WebhookChannelConfig {
   string url = 1;
   WebhookFormat format = 2;
-  map<string, string> headers = 3;
+  repeated WebhookHeader headers = 3;
 }
 
 message EmailChannelConfig {
   string address = 1;
 }
+
+message WebhookHeader {
+  string name = 1;
+  string value = 2; // omitted on response if isSecret is true
+  bool is_secret = 3;
+}