---
title: "Rotate webhook signing secret"
method: POST
path: "/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate webhook signing secret

`POST /webhooks/{id}/rotate-secret`

## Request

- Base URL: `https://barevalue.com/api/v1`
- URL: `https://barevalue.com/api/v1/webhooks/{id}/rotate-secret`
- Auth: HTTP bearer

Generate a new signing secret for the webhook. The old secret is immediately invalidated.

## Path parameters

- `id` integer, required

## Response `200`

New signing secret

- RotateSecretResponse
  - `secret` string: New HMAC signing secret. Store securely; the old secret is immediately invalidated.

## Other responses

- `401`: Missing or invalid API key
- `404`: Resource not found

---

[API](https://skmtc.dev/barevalue/apis/barevalue-api.md) · [All operations](https://skmtc.dev/barevalue/apis/barevalue-api/llms.txt) · [OpenAPI document](https://skmtc.dev/barevalue/apis/barevalue-api/revisions/c47bdd23fcf6?raw)