---
title: "Rotate webhook signing secret"
method: POST
path: "/api/emails/{address}/webhook/rotate"
tags: ["Email"]
---

# Rotate webhook signing secret

`POST /api/emails/{address}/webhook/rotate`

## Request

- Base URL: `https://domani.run`
- URL: `https://domani.run/api/emails/{address}/webhook/rotate`
- Auth: HTTP bearer

Regenerate the HMAC-SHA256 signing secret for a mailbox webhook. The old secret is immediately invalidated.

## Path parameters

- `address` string, required

## Response `200`

Secret rotated

- object
  - `address` string
  - `webhook_url` string
  - `signing_secret` string
  - `has_webhook` boolean
  - `hint` string

---

[API](https://skmtc.dev/domani/apis/domani-run-api.md) · [All operations](https://skmtc.dev/domani/apis/domani-run-api/llms.txt) · [OpenAPI document](https://skmtc.dev/domani/apis/domani-run-api/revisions/7679f8159533?raw)