Skip to main content

Rotate the signing secret

POST 
/webhook_subscriptions/:id/rotate_secret

Generates a new signing secret and returns it once.

The previous secret stays valid for grace_hours (default 24, max 168) and BOTH secrets sign every delivery until the window closes, so a receiver can pick up the new value on its own schedule without dropping events. Pass grace_hours: 0 for an immediate cutover — the right choice for a secret you believe has leaked.

Request​

Responses​

Rotated — new secret returned once.