Rotate a webhook signing secret.
POST/webhooks/:id/rotate_secret
Issues a new signing secret and returns it. Use this if the current secret has leaked or been lost.
The old secret stops being valid immediately, so deliveries signed with the new secret will fail verification until your endpoint is using it. Deploy the new secret promptly after rotating.
Request
Responses
- 201
- 401
- 403
- 404
- 409
- 429
The subscription, including its new signing secret.
API key authorization failed.
The API key is read-only and may not be used to rotate a secret.
No such webhook subscription for this user.
A concurrent webhook request for this user is already in progress. Retry once it completes.
Rate limit exceeded — the API key has sent too many requests. Wait before retrying. See the Rate Limits section in the overview for the recommended exponential backoff strategy.