---
title: "Rotate the secret for a webhook subscription"
method: POST
path: "/v1/webhooks/subscriptions/{subscription_id}/secret"
tags: ["Webhooks"]
---

# Rotate the secret for a webhook subscription

`POST /v1/webhooks/subscriptions/{subscription_id}/secret`

Rotate the secret for a webhook subscription

**Required scopes: `application/webhooks:read`, `application/webhooks:write`**

## Path parameters

- `subscription_id` string, required — The unique identifier of the subscription.

## Response `200`

Successful Response

- RotateWebhookSubscriptionSecretResponse
  - `secret` string, required — The new secret used to verify the payload of a webhook.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `429` — Too Many Requests

---

[API](https://skmtc.net/yoco/apis/yoco-api.md) · [All operations](https://skmtc.net/yoco/apis/yoco-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/yoco/yoco-api/revisions/1ee03e82bc45/schema)