---
title: "Rotate the webhook signing secret"
method: POST
path: "/agent-webhooks/{id}/rotate-secret"
---

# Rotate the webhook signing secret

`POST /agent-webhooks/{id}/rotate-secret`

## Request

- Base URL: `https://app.bitroad.ai/api/v1`
- URL: `https://app.bitroad.ai/api/v1/agent-webhooks/{id}/rotate-secret`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - API key in cookie `authjs.session-token`

## Headers

- `Idempotency-Key` string, required

## Response `200`

New signing secret

- object

## Other responses

- `201`: New signing secret
- `400`: Validation failed
- `401`: Unauthenticated
- `403`: Forbidden / policy denied
- `404`: Not found
- `409`: Conflict
- `429`: Rate limited
- `500`: Server error

---

[API](https://skmtc.dev/bitroad/apis/bitroad-api.md) · [All operations](https://skmtc.dev/bitroad/apis/bitroad-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bitroad/apis/bitroad-api/revisions/749efba1b5d6?raw)