---
title: "Rotate a tool's webhook secret"
method: POST
path: "/v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret"
tags: ["Agent Tools"]
---

# Rotate a tool's webhook secret

`POST /v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`

Generate a new signing secret for this tool. The previous one stops working on the next call, with no overlap, so update your endpoint first. The tool keeps its id, so flows that reference it by name are unaffected.

## Path parameters

- `senderId` string, required
- `toolId` string, required

## Response `200`

New secret generated.

- WebhookSecretResponse
  - `secret` string, required — The new webhook secret.

## Other responses

- `401` — Unauthorized.
- `404` — Tool not found.

---

[API](https://skmtc.net/zavudev/apis/zavu-unified-messaging-layer-api.md) · [All operations](https://skmtc.net/zavudev/apis/zavu-unified-messaging-layer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zavudev/zavu-unified-messaging-layer-api/revisions/4dacdff2adf8/schema)