Skip to main content

Rotate a webhook signing secret

POST 
/webhooks/endpoints/:key/rotate-secret

Issues a new signing secret for the endpoint.

  • The new secret signs every request from this moment, retries included.
  • Keep the previous secret for 24 hours only to verify requests that were already on their way; it is revoked after that.
  • Every call rotates again, and the secret is shown only in this response.
  • An unknown key, and an endpoint you have not set or have deleted, answer 404 NOT_FOUND.

Request​

Responses​

The new signing secret