Skip to main content
POST
Rotate webhook secret

Authorizations

API-Key
string
header
required

Your public API key. Identifies the partner making the request.

API-Sign
string
header
required

HMAC signature over the request, computed with your private key.

API-Nonce
string
header
required

Monotonically increasing nonce included in the request signature.

Path Parameters

webhook_id
string
required

Identifier returned by CreateWebhook.

Required string length: 1 - 64

Response

Successful response

Response from RotateWebhookSecret.

The new signing secret is returned in plaintext exactly once. Partners must persist it before discarding the response; it cannot be re-read later.

data
object
required

Data envelope returned exactly once after a successful RotateWebhookSecret.