Rotate the signing secret

POST

/webhooks/{id}/rotate-secret

Webhook Endpoints

Last modified:2026-06-05 10:12:55

Maintainer:Not configured

Generates a new signing secret for the endpoint. The old secret is immediately invalidated — update your verification logic before rotating. The new secret is shown once.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200

application/json

New secret generated.

Bodyapplication/json

🟠401Unauthorized

🟠404NotFound

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/webhooks//rotate-secret' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Success

{
    "id": 3,
    "signing_secret": "NEW_SECRET_VALUE_HERE",
    "signing_secret_notice": "Store this secret safely — it will not be shown again."
}

Modified at 2026-06-05 10:12:55

Delete a webhook endpoint

Send a test delivery