api_tokens

Triggered when a workspace Public API token is rotated via the Partner API.

postWebhookapi_token:rotated

Headers

X-TL-Partner-Idstring required

The unique identifier for the partner.

X-TL-Signaturestring required

a JSON Web Token (JWT) token that contains the partner_id, nbf (not before), and exp (expiration) fields. using the partner''s shared secret and can be used to verify authenticity and integrity.

Payload

workspace_idstring required
event_type'api_token:rotated' required

Partner webhook event name.

partner_idstring required

Unique identifier of the partner that owns the workspace.

triggered_atstring date-time required

Timestamp when the event was triggered.

rotated_atstring date-time required

Example payload

{
  "workspace_id": "my-workspace",
  "event_type": "api_token:rotated",
  "partner_id": "partner_12345",
  "triggered_at": "2024-01-01T12:00:00Z",
  "rotated_at": "2024-01-01T12:00:00Z"
}

Response

Receiver accepted the event

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.