---
title: "Rotate webhook secret"
method: POST
path: "/v1/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate webhook secret

`POST /v1/webhooks/{id}/rotate-secret`

Generate a new HMAC secret for signature verification. **Requires a secret key (sk_).**

**Important:** The new secret is only returned once. Update your webhook
handler immediately to use the new secret.

## Path parameters

- `id` string, required

## Response `200`

New secret generated

- object — New secret generated
  - `secret` string — New HMAC secret (only shown once!)
  - `message` string

## Other responses

- `401` — Unauthorized
- `404` — Webhook not found

---

[API](https://skmtc.net/usedrip/apis/drip-api.md) · [All operations](https://skmtc.net/usedrip/apis/drip-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/usedrip/drip-api/versions/2cb1567969ca/schema)