Skip to main content
POST
Rotate a webhook subscription signing secret
The previous secret keeps signing alongside the new one for 24 hours. Learn more about rotating a signing secret and verifying deliveries.

Authorizations

Authorization
string
header
required

Bearer token obtained from the /v1/auth/token endpoint. Send as: Authorization: Bearer .

Path Parameters

webhook_subscription_id
string<uuid>
required

Unique identifier of the webhook subscription

Pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$

Response

Signing secret rotated

webhookSubscriptionId
string<uuid>
required

Unique identifier of the webhook subscription

Pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$
signingSecret
string
required

HMAC-SHA256 key for verifying deliveries (Standard Webhooks, whsec_ prefixed base64). Shown only in this response; it cannot be retrieved again.