---
title: "Replace an existing secret"
method: PUT
path: "/webhook_secrets"
tags: ["Webhooks"]
---

# Replace an existing secret

`PUT /webhook_secrets`

Replace an existing webhook secret immediately or as part of rotation. This new secret will be used to verify all subsequent webhook request signature.

## Request body

- object
  - `is_rolling_secret` boolean — Set true to let the current secret expire in the next 24 hours. Set false to let the current secret expire immediately.

## Response `200`

Webhook secret response

- object
  - `deleted_at` string, date-time — Timestamp that the old secret is delete
  - `secret` string — Generated secret. Do not share. This secret will be used to verify that webhook requests were sent from Synctera.

## Other responses

- `401` — Unauthorized
- `404` — Resource not found
- `500` — Internal server error

---

[API](https://skmtc.net/synctera/apis/synctera-api.md) · [All operations](https://skmtc.net/synctera/apis/synctera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/synctera/synctera-api/revisions/b0d812e6cdd0/schema)