---
title: "Rotate Webhook Signing Secret"
method: POST
path: "/v3/webhooks/endpoints/{endpoint_id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate Webhook Signing Secret

`POST /v3/webhooks/endpoints/{endpoint_id}/rotate-secret`

## Request

- Base URL: `https://api.heygen.com`
- URL: `https://api.heygen.com/v3/webhooks/endpoints/{endpoint_id}/rotate-secret`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer

Generates a new signing secret for a webhook endpoint and immediately invalidates the old one. Store the new secret securely — it will not be shown again.

## Path parameters

- `endpoint_id` string, required

## Headers

- `Idempotency-Key` string

## Response `200`

Successful response

- object
  - `data` RotateSecretResponseData: Response from rotating a webhook endpoint's signing secret.
    - `endpoint_id` string, required: The endpoint whose secret was rotated.
    - `secret` string, required: The new signing secret. Store it securely — it will not be shown again.

## Other responses

- `400`: Invalid request parameters
- `401`: Authentication failed
- `404`: Resource not found
- `409`: A prior request with this Idempotency-Key is still in progress. Wait for the original request to complete, then retry.
- `429`: Rate limit exceeded

## Changes

- **2026-11-03** `7dfa5e59b4f5`: 10 info
  - added the optional property `error/errors` to the response with the `400` status
  - added the optional property `error/errors` to the response with the `401` status
  - added the optional property `error/errors` to the response with the `404` status
  - added the optional property `error/errors` to the response with the `409` status
  - …6 more

[Operation history](https://skmtc.dev/heygen/apis/heygen-external-api/changes/v3/webhooks/endpoints/:endpoint_id/rotate-secret/post.md)

---

[API](https://skmtc.dev/heygen/apis/heygen-external-api.md) - [All operations](https://skmtc.dev/heygen/apis/heygen-external-api/llms.txt) - [OpenAPI document](https://skmtc.dev/heygen/apis/heygen-external-api/revisions/7dfa5e59b4f5?raw)