Rotate an endpoint’s signing secret

Returns a new signing secret once. During the overlap window the delivery worker signs with both secrets, so a consumer sees two v1= entries in X-Signature and should accept if either matches. The window is capped at 24 hours — deliberately shorter than API-key rotation, to bound how long a leaked secret can still forge a delivery.

Requires an API key with one of these roles: admin.

Path Parameters

Response Body

curl -X POST "https://example.com/webhook-endpoints/497f6eca-6276-4993-bfeb-53cbbbba6f08/rotate" \  -H "Content-Type: application/json" \  -d '{}'

{  "data": {    "secret": "string"  },  "meta": {    "requestId": "string",    "timestamp": "string"  }}