Skip to main content
POST
Rotate the webhook secret
Rotating the secret replaces the account-wide webhook signing key. Because the key is shared across every connection and webhook URL registered under your account, all future deliveries are signed with the new key. Update your verification logic before rotating, or immediately after, to avoid rejecting valid webhooks.

Example Request

Example Response

Only client_id and client_secret headers are required. Store the returned webhook_secret_key securely and use it to verify webhook signatures.

Authorizations

client_id
string
header
required
client_secret
string
header
required
access_token
string
header
required

Response

Webhook secret rotated

success
boolean
required
message
string
required
webhook_secret_key
string
required