POST

/webhooks/{webhookId}/rotate-secret

Replace the signing secret. Events are signed with the new secret immediately. Owner/admin.

Authorization

bearer webhooks:manage

headerAuthorizationBearer <token>

API key (rsl_live_…) from Settings → Developers.

Scope: webhooks:manage

Path Parameters

webhookId*string

Webhook endpoint id. Never invent ids – list resources first.

Length1 <= length <= 64

Success

application/json

secret*string

curl -X POST "https://example.com/webhooks/string/rotate-secret"

{  "secret": "string"}