Rotate webhook signing secret

POSThttps://app.speybooks.com/api/v1/webhooks/{id}/rotate

Replace the signing secret for a webhook endpoint. The new secret is returned in this response ONLY and cannot be retrieved again; store it now. It takes effect immediately, so update your verification code before or immediately after rotation.

Unlike API key rotation, there is no grace period. The old secret stops working as soon as the new one is set.

Path parameters

idintegerrequired

Webhook endpoint ID whose secret to rotate.

Response

200Signing secret rotated. The new secret is returned ONCE in this response and cannot be retrieved again; update your verification code and store it now.

Show response fields

idinteger

messagestring

secretstring

Error codes

400Invalid endpoint ID.

404Webhook endpoint not found.

RequestPOST/v1/webhooks/{id}/rotatecurl

curl -X POST https://api.speybooks.com/v1/webhooks/3/rotate \
  -H "Authorization: Bearer sk_test_..."

Response200

{
  "success": true,
  "data": {
    "id": 3,
    "secret": "whsec_new_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6",
    "message": "Signing secret rotated. Update your verification code."
  }
}