Webhooks
Rotate the HMAC secret for a subscription
Generates a new HMAC secret and invalidates the old one immediately. Returns the new secret ONCE — store it before responding to the caller. There is no grace window during which both secrets verify; if you need an overlap, stand up a second subscription on a distinct path, switch over, then delete the old one.
post/api/v1/webhook-subscriptions/{id}/rotate-secret
Path parameters
idstring required
Example:whsub_3f7a9b1c8d2e4f5a6b7c8d9e0f1a2b3c
The public subscription id returned by POST /api/v1/webhook-subscriptions — shaped whsub_<32 hex chars>.
Response
Secret rotated. Body contains the new secret — the only place it is ever returned.
Example response
{
"data": {
"id": "whsub_3f7a9b1c8d2e4f5a6b7c8d9e0f1a2b3c",
"secret": "whsec_NewlyGeneratedSecretMaterial",
"secret_prefix": "whsec_"
}
}