---
title: "Rotate a webhook secret"
method: POST
path: "/v1/automations/{automation_id}/webhook/rotate_secret"
tags: ["Automations"]
---

# Rotate a webhook secret

`POST /v1/automations/{automation_id}/webhook/rotate_secret`

## Request

- Base URL: `https://api.dexto.ai`
- URL: `https://api.dexto.ai/v1/automations/{automation_id}/webhook/rotate_secret`
- Auth: HTTP bearer

Replace a webhook automation's signing secret. The old secret stops at once.

## Path parameters

- `automation_id` string, required

## Response `200`

Successful response.

- object
  - `automation_id` string, uuid, required
  - `object` 'automation_webhook_secret', required
  - `webhook_secret` string, required: The new signing secret. The old one stops working now.

## Other responses

- `400`: Invalid JSON or request fields.
- `401`: Missing or invalid API key.
- `402`: The account has insufficient credits.
- `403`: The account cannot perform this operation.
- `404`: The requested resource was not found.
- `409`: The request conflicts with existing resource state.
- `429`: The account exceeded this operation's request rate.
- `500`: Unexpected Dexto failure.
- `502`: The upstream model provider failed.
- `503`: A required Dexto service is temporarily unavailable.

---

[API](https://skmtc.dev/dexto/apis/dexto-api.md) - [All operations](https://skmtc.dev/dexto/apis/dexto-api/llms.txt) - [OpenAPI document](https://skmtc.dev/dexto/apis/dexto-api/revisions/47eb880cffa5?raw)