Skip to main content
POST
Rotate signing secret
Mints a new whsec_… secret and returns it once. The previous secret is invalidated immediately — there is no overlap window. If you need overlap (e.g. rolling deploys), use this flow:
  1. Pause the subscription.
  2. Rotate the secret here.
  3. Deploy your verifier with the new secret.
  4. Unpause the subscription via Update.
Scope webhooks:write · rate-limited

Headers

string
required
API key.

Path parameters

string
required
Subscription UUID.

Response

string
Subscription UUID.
string
The new signing secret in plaintext. Returned only here — store it immediately.
string
First few characters of the new secret.