---
title: "Update a webhook key secret"
method: POST
path: "/webhooks/keys"
tags: ["Webhooks"]
---

# Update a webhook key secret

`POST /webhooks/keys`

Updates the HMAC secret for a webhook endpoint.


The HMAC secret is a key used to create an encrypted hash of the webhook payload, ensuring the integrity and authenticity of messages sent to your webhook URL.


Ensure your server can decrypt messages with the new HMAC key before
updating. Discard the old HMAC secret after the update is completed.


Visit our [Message Security](https://developer.fastspring.com/reference/message-security) section for more details on how to use this HMAC secret.

## Request body

- object
  - `url` string, uri, required — The URL associated with the webhook endpoint.
  - `hmacSecret` string, required — The new HMAC secret key for signing webhook payloads.

## Response `200`

OK

- object
  - `url` string — The URL of the webhook endpoint.
  - `action` string — The action performed by the API.
  - `result` string — The result of the operation.

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.dev/fastspring/apis/fastspring-api-accounts.md) · [All operations](https://skmtc.dev/fastspring/apis/fastspring-api-accounts/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fastspring/fastspring-api-accounts/revisions/ae2f0b97db3e/schema)