Webhooks
Rotate signing secret
Mint a fresh HMAC signing secret, returned ONCE (stored encrypted, never retrievable again). Requires an existing endpoint (set a URL first). Deliveries signed with the old secret stop verifying immediately.
post/v1/webhooks/rotate-secret
Query parameters
owner_kind'user' | 'mm'
Which endpoint to address: user (default) or mm (market-maker).
Response
OK