---
title: "Rotate webhook signing secret"
method: POST
path: "/v1/webhook-endpoints/{endpoint_id}/rotate-secret"
---

# Rotate webhook signing secret

`POST /v1/webhook-endpoints/{endpoint_id}/rotate-secret`

Generates a new signing secret for the webhook endpoint. The previous secret is immediately invalidated.

## Path parameters

- `endpoint_id` string, required

## Response `200`

Signing secret rotated successfully.

- RotateSigningSecretResponse
  - `signing_secret` string, required — The new signing secret. Store it securely — it cannot be retrieved again.

## Other responses

- `401` — Missing or invalid API key.
- `404` — Resource not found.
- `422` — Validation error or malformed resource ID.
- `500` — Internal server error.

---

[API](https://skmtc.net/poly/apis/polyai-agents-api.md) · [All operations](https://skmtc.net/poly/apis/polyai-agents-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/poly/polyai-agents-api/versions/76f3c606e395/schema)