Rotate webhook signing secret

POST https://app.speybooks.com/api/v1/webhook-endpoints/{id}/rotate

Replace the signing secret for a webhook endpoint. The new secret takes effect immediately — update your verification code before or immediately after rotation.

Unlike API key rotation, there is no grace period. The old secret stops working as soon as the new one is set.

Path parameters

id integer required

Webhook endpoint ID whose secret to rotate.

Response

200 Signing secret rotated. Returns the new secret. Update your verification code immediately.

Show response fields

id integer

message string

secret string

Error codes

400 Invalid endpoint ID.

404 Webhook endpoint not found.

Request POST /v1/webhook-endpoints/{id}/rotate curl

curl -X POST https://api.speybooks.com/v1/webhooks/3/rotate \
  -H "Authorization: Bearer sk_test_..."

Response 200

{
  "success": true,
  "data": {
    "id": 3,
    "secret": "whsec_new_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6",
    "message": "Signing secret rotated. Update your verification code."
  }
}