Skip to main content
POST
Rotate a webhook signing secret

Authorizations

X-API-Key
string
header
required

Your API key, prefixed sc_live_ or sc_test_.

Path Parameters

id
string
required

id is the webhook endpoint whose signing secret to rotate.

Response

200 - application/json

Success

secret
string

secret is the new signing secret, shown only once, like at registration.

prevSecretExpiresAt
string

prev_secret_expires_at is when the previous secret stops being accepted (RFC 3339). Until then both secrets validate a delivery.