Webhooks

Rotate the signing secret

Returns the NEW secret once. The old secret stays valid for 24h and every delivery in that window is signed with BOTH — two space-separated v1= values — so a consumer can roll without dropping events.

Requires the webhooks:write scope. Accepts all three lanes: a session JWT (bounded by the caller's role on this workspace) or an il_* machine credential whose own scope set, workspace set and validity window cover it — both ceilings apply and neither can raise the other, so a credential carrying webhooks:write is still refused where the role does not permit it.

A credential with no scope record resolves to LEGACY_DEFAULT, which does NOT include webhooks:write — mint a key with it explicitly (POST /v2/workspaces/{id}/keys).

post/v2/workspaces/{id}/webhooks/{whkId}/rotate-secret

Request

  • Base URL: https://api.infolang.ai
  • URL: https://api.infolang.ai/v2/workspaces/{id}/webhooks/{whkId}/rotate-secret
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer
    • HTTP bearer

Path parameters

idstring required
whkIdstring required

Response

The endpoint, with the new secret

webhook_idstring required
workspace_idstring required
urlstring required
enabled_eventsstring[] required
status'enabled' | 'disabled' | 'auto_disabled' required
include_contentboolean required
include_ingest_memoriesboolean required
coord_event_kindsstring[]
coord_cursorstring
descriptionstring
auto_disabled_reasonstring
createdstring required
updatedstring required
secretstring
previous_secret_expires_atstring

Changes

No recorded changes to this operation across all 1 revision of this API.