Rotate Webhook Signing Secret
Replaces the signing secret of an active webhook subscription and returns the new secret, which is shown only in this response. For 24 hours after a rotation, every delivery carries two entries in webhook-signature: one made with the new secret and one with the previous secret, so your verifier keeps accepting deliveries while you switch it to the new secret. After that only the new secret signs. Rotating again within the 24 hours retires the oldest secret immediately. If the previous secret may have leaked, end the overlap at once with DELETE /webhooks/subscriptions//signing-secret/previous. A subscription created before delivery signing was introduced has no secret and receives no deliveries until it is rotated once with this endpoint. Responds 404 when the subscription does not exist, is inactive, or belongs to another entity.
Authorizations
Bearer token obtained from the /v1/auth/token endpoint. Send as: Authorization: Bearer .
Path Parameters
Unique identifier of the webhook subscription
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$Response
Signing secret rotated
Unique identifier of the webhook subscription
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$HMAC-SHA256 key for verifying deliveries (Standard Webhooks, whsec_ prefixed base64). Shown only in this response; it cannot be retrieved again.