---
title: "Rotate webhook endpoint signing secret"
method: POST
path: "/v1/webhooks/endpoints/{endpointId}/secret/rotate"
tags: ["Webhooks"]
---

# Rotate webhook endpoint signing secret

`POST /v1/webhooks/endpoints/{endpointId}/secret/rotate`

Generates a new signing secret for the endpoint. The previous secret stays valid for 24 hours so receivers can roll over without dropping deliveries.

## Path parameters

- `endpointId` string, required

## Headers

- `X-API-Key` string

## Response `201`

Signing secret rotated successfully

- EndpointSecretResponseDto
  - `key` string, required — Signing secret used to verify webhook signatures on this endpoint

## Other responses

- `401` — Unauthorized - Invalid or missing authentication credentials

---

[API](https://skmtc.dev/infinite/apis/infinite-api.md) · [All operations](https://skmtc.dev/infinite/apis/infinite-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/infinite/infinite-api/revisions/70223aefae8c/schema)