---
title: "Rotate signing secret"
method: POST
path: "/v1/webhooks/{webhook_id}/rotate-secret"
tags: ["webhooks"]
---

# Rotate signing secret

`POST /v1/webhooks/{webhook_id}/rotate-secret`

## Request

- Base URL: `https://api.framelane.io`
- URL: `https://api.framelane.io/v1/webhooks/{webhook_id}/rotate-secret`
- Auth: HTTP bearer

Rotate the workspace signing secret. Framelane signs every delivery with a single workspace-level secret, so rotation re-keys all webhook endpoints and per-request `webhook_url` callbacks in the workspace — not just this one.

## Path parameters

- `webhook_id` string, required

## Response `200`

Successful Response

- WebhookRotateResponse
  - `secret` string, required

## Other responses

- `401`: Missing or invalid API key.
- `404`: Webhook not found.
- `422`: Validation Error

---

[API](https://skmtc.dev/framelane/apis/framelane-api.md) · [All operations](https://skmtc.dev/framelane/apis/framelane-api/llms.txt) · [OpenAPI document](https://skmtc.dev/framelane/apis/framelane-api/revisions/a223001ca8e5?raw)