---
title: "Rotate the signing secret"
method: POST
path: "/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate the signing secret

`POST /webhooks/{id}/rotate-secret`

## Request

- Base URL: `https://api.eusend.dev`
- URL: `https://api.eusend.dev/webhooks/{id}/rotate-secret`
- Auth: HTTP bearer

Issues a new secret and returns it. Deliveries signed with the old secret stop verifying immediately.

## Path parameters

- `id` string, uuid, required

## Response `200`

The new secret.

- WebhookSecretResponse
  - `secret` string, required

## Other responses

- `401`: Missing, malformed, or revoked API key (`UNAUTHORIZED`).
- `403`: The key exists but may not reach this resource — a `sending_access` key outside the send paths, a test-mode key writing live state, or an account on hold (`FORBIDDEN`, `ACCOUNT_RESTRICTED`).
- `404`: No such resource on this organization (`NOT_FOUND`).
- `429`: Rate limit exceeded (`RATE_LIMITED`).
- `500`: Unexpected server error (`INTERNAL_ERROR`). Carries `request_id`.

---

[API](https://skmtc.dev/eusend/apis/eusend-api.md) · [All operations](https://skmtc.dev/eusend/apis/eusend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/eusend/apis/eusend-api/revisions/bec561f55488?raw)