---
title: "Create webhook secret"
method: POST
path: "/api/v2/webhook/secret"
tags: ["Webhook"]
---

# Create webhook secret

`POST /api/v2/webhook/secret`

Create a webhook secret for a specified enterprise or organization.
This secret will be used to generate webhook notification signatures so that you can verify that the notification comes from BitGo using the v2.webhook.notification.verify endpoint.
The secret can be rotated by calling this endpoint again at a cadence of once every 5 minutes.
You must specify exactly one of `enterpriseId` or `organizationId`.
The requester must be an admin of the specified enterprise or organization.

## Request body

- object
  - `enterpriseId` string
  - `organizationId` string

## Response `200`

OK

- CreateWebhookSecretResponse
  - `secret` string, required

## Other responses

- `400` — Bad Request
- `403` — Forbidden
- `404` — Not Found

---

[API](https://skmtc.net/bitgo/apis/bitgo-api.md) · [All operations](https://skmtc.net/bitgo/apis/bitgo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bitgo/bitgo-api/revisions/e445c15e5bee/schema)