Sign in
latestOpenAPI 3.1.0MIT2026-08-102135157.7 KB

fcc788f31a0a

brand-callbacks

Set a customer-provided HMAC secret for webhook signing.

Sets a customer-provided HMAC secret for the specified project. The full secret is returned once in the response body — this is the only time it is visible in plain text. Store it securely immediately after this call.

patch/v1/projects/{projectId}/callbackConfig

Path parameters

projectIdstring required

Customer's project id

Request body

hmacSecretstring password

The HMAC secret to be updated for the specified project

Example request

{
  "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
}

Response

Secret updated. The full secret is returned once — store it securely.

projectIdstring

Project ID this callback configuration belongs to.

hmacSecretstring password

The full HMAC secret for webhook signature verification. Returned only once — on creation or rotation.

Example response

{
  "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
}