v2
latestOpenAPI 3.1.0Source-specific upstream terms; see response catalog metadata2026-07-26139203447.9 KBUser
Webhooks
Rotate an outbound webhook signing secret
Cancels pending deliveries signed with the old key and atomically stores the encrypted replacement response. An identical Idempotency-Key retry within 24 hours returns the same secret without rotating again.
post/api/v1/user/webhooks/{id}/rotate
Path parameters
idinteger required
Headers
X-CSRF-Tokenstring required
Fresh token returned by GET /api/v1/user/me for this authenticated session.
Idempotency-Keystring required
Required for account mutations that reveal a secret. Reuse the same key only for an identical payload. The encrypted response can be replayed for 24 hours; a changed payload or an expired key returns 409.
Response
Rotated, or the exact replacement signing secret replayed for the same key