---
title: "Replace the endpoint's signing secret"
method: POST
path: "/v1/webhooks/{endpointId}/rotate-secret"
tags: ["Webhooks"]
---

# Replace the endpoint's signing secret

`POST /v1/webhooks/{endpointId}/rotate-secret`

## Request

- Base URL: `https://api.ironfang.com/audit`
- URL: `https://api.ironfang.com/audit/v1/webhooks/{endpointId}/rotate-secret`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Mints a new signing secret and returns it once; deliveries signed from now on use it, so update the receiver first if it verifies strictly.

## Path parameters

- `endpointId` string, uuid, required

## Response `200`

The new signing secret, shown only in this response.

## Other responses

- `404`: Problem response

---

[API](https://skmtc.dev/ironfang/apis/ironfang-audit-api.md) · [All operations](https://skmtc.dev/ironfang/apis/ironfang-audit-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ironfang/apis/ironfang-audit-api/revisions/7430deff2cbd?raw)