Webhooks

Roll the signing secret

Changed on

Returns a new secret once. Deliveries carry both signatures until the previous secret expires, so receivers can be updated without downtime.

post/v1/webhook-endpoints/{endpoint_id}/roll-secret

Request

  • Base URL: https://api-eu.dynamicdocumentapi.com
  • URL: https://api-eu.dynamicdocumentapi.com/v1/webhook-endpoints/{endpoint_id}/roll-secret
  • Auth: one of:
    • HTTP bearer
    • API key in header X-API-Key

Path parameters

endpoint_idstring required

Webhook endpoint id (whe_…).

Headers

Idempotency-Keystring

Replays the stored response for 24 h; a different body with the same key → 422.

Request body

expire_previous_ininteger

Seconds the previous secret keeps signing deliveries (0 = immediately).

Response

The new secret, shown once.

created_atstring date-time required
descriptionstring required
disabled_reasonstring nullable required

Set when Dynamic Document API disabled the endpoint after repeated failures, or because its URL answered 410 Gone.

enabledboolean required
eventsstring[] required
headersobject required

Header names; the values are masked.

idstring required

whe_…

is_defaultboolean required
managed_by'zapier' | 'make' | 'n8n' | 'bubble' | 'pipedream' | 'activepieces' | 'power_automate' | 'null' nullable required

The integration (e.g. zapier) that created the endpoint for its instant triggers; null for your own endpoints. It is never the default endpoint, the dashboard shows it read-only, and it is deleted when you disconnect the integration or when its URL answers 410 Gone.

  • zapier - zapier
  • make - make
  • n8n - n8n
  • bubble - bubble
  • pipedream - pipedream
  • activepieces - activepieces
  • power_automate - power_automate
objectstring
secretstring required

whsec_…, base64 of 32 random bytes. Shown once.

template_idsstring[] required

Empty list = every template.

updated_atstring date-time required
urlstring uri required

Changes