Skip to main content
GET
Retrieve an endpoint signing secret
Store the secret in a server-side secret manager. Never expose it in browser code, application logs, source control, or ordinary endpoint configuration. Use this secret with a maintained Standard Webhooks verification library and the exact raw request body.

Authorizations

X-API-Key
string
header
required

A Modulus API key with the required webhook scope.

Path Parameters

id
string<uuid>
required

Webhook endpoint identifier returned by the create operation.

Response

Signing secret retrieved.

signing_secret
string
required

Endpoint-specific secret used to verify Standard Webhooks signatures.

Pattern: ^whsec_
Example:

"whsec_dGVzdF9zaWduaW5nX3NlY3JldA=="