Skip to main content
POST
Rotate the signing secret

Authorizations

Authorization
string
header
required

Secret key, kc_sk_test_... or kc_sk_live_.... Server-side only.

Headers

Idempotency-Key
string
required

Unique key per logical request, reused on retries. 1 to 255 characters.

Required string length: 1 - 255

Path Parameters

id
string
required

Response

Webhook endpoint with the new secret.

id
string
required
Example:

"we_01JABCDEF"

object
string
required
Allowed value: "webhook_endpoint"
url
string<uri>
required
enabled_events
string[]
required

Event types, or ["*"] for all.

status
enum<string>
required
Available options:
enabled,
disabled
created_at
string<date-time>
required
description
string | null
secret
string

Only returned on create and rotate. Starts with whsec_.