---
title: "Rotate a webhook's signing secret."
method: POST
path: "/v1/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate a webhook's signing secret.

`POST /v1/webhooks/{id}/rotate-secret`

## Request

- Base URL: `https://api.inboxy.net`
- URL: `https://api.inboxy.net/v1/webhooks/{id}/rotate-secret`
- Auth: HTTP bearer

Requires `manage` scope. Invalidates the previous secret immediately; the new value is shown once in this response.

## Path parameters

- `id` string, uuid, required

## Response `200`

Rotated.

- object
  - `secret` string, required

## Other responses

- `403`: Token lacks the required scope.
- `404`: No matching resource owned by the caller.

---

[API](https://skmtc.dev/inboxy/apis/inboxy-api.md) · [All operations](https://skmtc.dev/inboxy/apis/inboxy-api/llms.txt) · [OpenAPI document](https://skmtc.dev/inboxy/apis/inboxy-api/revisions/25155a8dec0f?raw)