Skip to main content
POST
Rotate the webhook signing secret

Authorizations

Authorization
string
header
required

A workspace API key from Settings → Developers → API keys, sent as Authorization: Bearer sk_… (or X-API-Key: sk_…). It acts as one workspace member and uses the workspace's credits.

Response

The new secret, and until when the old one still signs.

secret
string
required
Example:

"whsec_MfKQ9r8GKYqrTwjUPD8ILPZIo2LaLaSw"

previousSecretValidUntil
string<date-time>

After a rotation, until when the previous secret still signs.