Rotate Webhook Secret
Replace the signing secret (the new one is in the response only once); the old one stops signing at once.
API key access
admin scope with an API key (ro_pat_...). A signed-in session uses the caller's role./api/v1/webhook-endpoints/{endpoint_id}/rotate-secretAccess token from /api/v1/auth/login, or an API key (ro_pat_..., RO-176) from /api/v1/workspaces/current/api-keys: the key implies its workspace and needs the route's scope. MCP connectors (/api/v1/mcp only) may use an OAuth access token (ro_oat_..., RO-284).
In: header
Path Parameters
uuidHeader Parameters
Id of the workspace to act on (must be a member).
Response Body
curl -X POST "http://localhost:8000/api/v1/webhook-endpoints/497f6eca-6276-4993-bfeb-53cbbbba6f08/rotate-secret" \ -H "X-Workspace-Id: string"{
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"url": "string",
"description": "string",
"event_types": [
"string"
],
"secret_prefix": "string",
"enabled": true,
"disabled_reason": "string",
"disabled_at": "2019-08-24T14:15:22Z",
"consecutive_failures": 0,
"last_success_at": "2019-08-24T14:15:22Z",
"last_failure_at": "2019-08-24T14:15:22Z",
"created_by": "ee824cad-d7a6-4f48-87dc-e8461a9201c4",
"created_at": "2019-08-24T14:15:22Z",
"updated_at": "2019-08-24T14:15:22Z",
"secret": "whsec_Ab3dEfGhIjKlMnOpQrStUvWxYz0123456789abcdefg"
}{
"detail": [
{
"loc": [
"string"
],
"msg": "string",
"type": "string",
"input": null,
"ctx": {}
}
]
}Replay Webhook Delivery
Queue the same event (same `event_id` and body, signed anew) as a new delivery, e.g. a `dead` one after fixing the receiver.
Test Webhook Endpoint
Send a signed `webhook.test` event now (one attempt, no retries; the endpoint's failure count is not touched) and return the delivery with the receiver's answer.