---
title: "Rotate Webhook Signing Secret"
method: POST
path: "/v3/webhooks/endpoints/{endpoint_id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate Webhook Signing Secret

`POST /v3/webhooks/endpoints/{endpoint_id}/rotate-secret`

Generates a new signing secret for a webhook endpoint and immediately invalidates the old one. Store the new secret securely — it will not be shown again.

## Path parameters

- `endpoint_id` string, required

## Headers

- `Idempotency-Key` string

## Response `200`

Successful response

- object
  - `data` RotateSecretResponseData — Response from rotating a webhook endpoint's signing secret.
    - `endpoint_id` string, required — The endpoint whose secret was rotated.
    - `secret` string, required — The new signing secret. Store it securely — it will not be shown again.

## Other responses

- `400` — Invalid request parameters
- `401` — Authentication failed
- `404` — Resource not found
- `409` — A prior request with this Idempotency-Key is still in progress. Wait for the original request to complete, then retry.
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/heygen/apis/heygen-external-api.md) · [All operations](https://skmtc.net/heygen/apis/heygen-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/heygen/heygen-external-api/revisions/e2e54726e210/schema)