---
title: "Generate a webhook signing secret for the authenticated merchant"
method: POST
path: "/api/v1/webhooks/secret"
tags: ["Webhook"]
---

# Generate a webhook signing secret for the authenticated merchant

`POST /api/v1/webhooks/secret`

Generate a webhook signing secret for the authenticated merchant

## Request body

- WebhookSecretInput — Input for webhook secret operations
  - `merchant_id` string, uuid — Merchant ID. Defaults to the logged-in merchant if not provided. Required for admin tokens.

## Response `200`

Success

- WebhookGenerateWebhookSecretResponse
  - `success` boolean, required — Indicates if the request was successful
  - `data` object, required
    - `webhook_secret` string, required — The newly generated webhook signing secret

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/banqzinc/apis/quidkey-api.md) · [All operations](https://skmtc.net/banqzinc/apis/quidkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/banqzinc/quidkey-api/revisions/f86d2bdbcb08/schema)