---
title: "Get webhook secret rotation status"
method: GET
path: "/webhooks/secret-status"
tags: ["Webhooks"]
---

# Get webhook secret rotation status

`GET /webhooks/secret-status`

Returns information about the current webhook secret including rotation status and expiry of old secret if applicable.

## Response `200`

Secret status retrieved successfully

- SecretStatusResponse — Webhook secret status and rotation info
  - `created_at` string, date-time, nullable, required — When the webhook secret was created
  - `last_rotated_at` string, date-time, nullable — When the webhook secret was last rotated
  - `grace_period_active` boolean — Whether the old secret is still valid alongside the new one
  - `grace_period_ends_at` string, date-time, nullable — When the old secret grace period expires

## Other responses

- `401` — Unauthorized - Invalid or missing API key
- `404` — No webhook configuration found
- `429` — Too Many Requests - Rate limit exceeded

---

[API](https://skmtc.dev/firma/apis/firma-partner-api.md) · [All operations](https://skmtc.dev/firma/apis/firma-partner-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/firma/firma-partner-api/revisions/5c03d6a9d080/schema)