Skip to main content
POST
Rotate Webhook Secret

Authorizations

API-Key
string
header
required

Your public API key. Identifies the partner making the request.

API-Nonce
string
header
required

Monotonically increasing nonce included in the request signature.

API-Sign
string
header
required

HMAC signature over the request, computed with your private key.

Path Parameters

webhook_id
string
required

Unique identifier for the webhook

Example:

"WHTEST-XXXXX-EXAMPLE"

Response

Successful response

Response from RotateWebhookSecret.

The new signing secret is returned in plaintext exactly once. Partners must persist it before discarding the response; it cannot be re-read later.

data
object
required

Data envelope returned exactly once after a successful RotateWebhookSecret.

Defined as a sibling top-level message rather than a RotateWebhookSecretResponse nested type because the kgrpc proto build pipeline does not currently honor debug_visibility: REDACT on fields of nested messages, which we rely on here to keep signing_secret out of Debug output.