latestOpenAPI 3.1.0MIT2026-08-102135157.7 KB

fcc788f31a0a

brand-callbacks

Rotate the HMAC secret for webhook signing.

Generates a new server-side HMAC secret for the specified project and replaces the existing one. The full secret is returned once in the response body — this is the only time it is visible in plain text. Store it securely immediately after this call.

Use this endpoint when you want Sinch to generate a cryptographically random secret rather than supplying your own.

post/v1/projects/{projectId}/callbackConfig/rotate

Path parameters

projectIdstring required

Customer's project id

Response

New secret generated. The full secret is returned once — store it securely.

projectIdstring

Project ID this callback configuration belongs to.

hmacSecretstring password

The full HMAC secret for webhook signature verification. Returned only once — on creation or rotation.

Example response

{
  "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
}