---
title: "Remove outbound webhook signing secret"
method: DELETE
path: "/webhooks/{id}/secrets/{secretId}"
tags: ["Webhooks"]
---

# Remove outbound webhook signing secret

`DELETE /webhooks/{id}/secrets/{secretId}`

Removes an active signing secret. A webhook must keep at least one signing secret.

## Path parameters

- `id` string, required
- `secretId` string, required

## Response `200`

Secret removed

- object
  - `success` boolean
  - `webhook` OutboundWebhookEndpoint
    - `id` string
    - `name` string
    - `url` string, uri
    - `status` 'enabled' | 'disabled'
    - `events` OutboundWebhookEventType[]
    - `consecutiveFailures` integer — Consecutive failed delivery attempts used for endpoint backoff.
    - `circuitOpenedAt` string, date-time, nullable
    - `circuitOpenUntil` string, date-time, nullable
    - `signingSecret` string — Returned only when creating a webhook or adding a signing secret.
    - `signingSecrets` object[] — Active signing secret metadata. Secret values are returned only once.
      - `id` string
      - `prefix` string
      - `createdAt` string, date-time
    - `lastSuccessAt` string, date-time, nullable
    - `lastFailureAt` string, date-time, nullable
    - `createdAt` string, date-time
    - `updatedAt` string, date-time

## Other responses

- `400` — Last signing secret cannot be removed
- `401` — Unauthorized
- `404` — Webhook or signing secret not found

---

[API](https://skmtc.net/sequenzy/apis/sequenzy-api.md) · [All operations](https://skmtc.net/sequenzy/apis/sequenzy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sequenzy/sequenzy-api/versions/af1cf9620482/schema)