Sign upLogin
DocumentationAPI Reference
API referenceWebhooks

Rotate an endpoint's signing secret

Requires a current workspace administrator personal access token. The new secret is shown once. The previous secret remains valid for the documented overlap period.

POST
/api/v1/workspaces/{workspaceId}/webhook-endpoints/{endpointId}/rotate-secret

Requires a current workspace administrator personal access token. The new secret is shown once. The previous secret remains valid for the documented overlap period.

Authorization

machineBearer
AuthorizationBearer <token>

Personal access tokens and supported service-account keys are accepted only in the Authorization header and never in URLs. Each operation documents which principal types it authorizes.

In: header

Path Parameters

workspaceId*string

Workspace UUID. It must match the workspace bound to the credential.

Formatuuid
endpointId*string
Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/api/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/webhook-endpoints/497f6eca-6276-4993-bfeb-53cbbbba6f08/rotate-secret"
{  "signingSecret": "string",  "generation": 2,  "previousSecretExpiresAt": "2019-08-24T14:15:22Z"}

Replace an endpoint's event subscriptions PUT

Requires a current workspace administrator personal access token. This is a full replacement, not an additive patch.

Disable an outbound webhook endpoint POST

Requires a current workspace administrator personal access token. Disabled endpoints stop receiving newly created deliveries.