Skip to main content
POST
Rotate an endpoint signing secret
Replace the stored endpoint secret promptly and keep rotation requests idempotent. Do not assume that creating, listing, or retrieving an endpoint returns its secret; only the dedicated signing-secret operations do.

Authorizations

X-API-Key
string
header
required

A Modulus API key with the required webhook scope.

Headers

Idempotency-Key
string
required

Unique key for this signing-secret rotation. Reuse the same key only when retrying the same operation.

Path Parameters

id
string<uuid>
required

Webhook endpoint identifier returned by the create operation.

Response

Signing secret rotated. This response contains the new secret.

signing_secret
string
required

Endpoint-specific secret used to verify Standard Webhooks signatures.

Pattern: ^whsec_
Example:

"whsec_dGVzdF9zaWduaW5nX3NlY3JldA=="