---
title: "Rotate a webhook signing secret"
method: POST
path: "/v1/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate a webhook signing secret

`POST /v1/webhooks/{id}/rotate-secret`

Issues a new signing secret and returns it. The previous secret stops verifying immediately, so update your receiver before rotating in production. This is the only other time the secret is returned.

## Path parameters

- `id` integer, required

## Response `201`

Rotate a webhook signing secret

- TestingbotEntitiesWebhookSecret — Testingbot_Entities_WebhookSecret model
  - `id` integer, required — Numeric ID of the webhook whose secret was rotated.
  - `signing_secret` string, required — The new signing secret. The previous one stops verifying immediately.

## Other responses

- `401` — Authentication required
- `403` — Your role does not permit this action
- `404` — Webhook not found

---

[API](https://skmtc.net/testingbot/apis/testingbot-rest-api.md) · [All operations](https://skmtc.net/testingbot/apis/testingbot-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/testingbot/testingbot-rest-api/versions/eff607a49246/schema)