Skip to main content
POST
Rotate a webhook secret

Authorizations

Authorization
string
header
required

Server-side scoped Blank API key. Never embed it in browser or mobile code.

Headers

idempotency-key
string
required
Required string length: 8 - 128
Pattern: ^[\x21-\x7E]+$
Example:

"launch-20260809-01"

if-match
string
required
Pattern: ^"[1-9][0-9]*"$
Example:

"\"1\""

Path Parameters

endpointId
string<uuid>
required

Body

application/json
overlapHours
integer
default:24
Required range: 1 <= x <= 24

Response

Endpoint and new one-time secret.

endpoint
object
required
secret
string
required
Pattern: ^whsec_[A-Za-z0-9_-]{43}$