Skip to main content

Rotate the inbound signing secret

POST 
/ingest/sources/:id/secrets

Mints a new signing secret and returns it once. Existing secrets keep verifying until you revoke them, so a rotation is zero-downtime: publish the new key, cut over, then revoke the old one.

{id} is the integration's uuid (data.id), not the src_… id.

Request​

Responses​

Created — cleartext secret, shown once.