---
title: "Rotate an endpoint's signing secret"
method: POST
path: "/api/v1/webhook-endpoints/{endpoint_id}/rotate-secret"
tags: ["webhooks"]
---

# Rotate an endpoint's signing secret

`POST /api/v1/webhook-endpoints/{endpoint_id}/rotate-secret`

## Request

- Base URL: `https://api.izap.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.izap.ai/api/v1/webhook-endpoints/{endpoint_id}/rotate-secret`
- Auth: HTTP bearer

Issues a new signing secret and returns it. **The previous secret stops verifying immediately** and there is no overlap window, so deploy the new one to your receiver before rotating. The business is taken from the `business-id` header rather than the URL; the path-scoped form of this operation is deprecated.

## Path parameters

- `endpoint_id` string, uuid, required

## Headers

- `business-id` string, nullable, required: UUID of the business the request is scoped to. Required on this route; the deprecated /businesses/{business_id}/... form takes it from the path instead.

## Response `200`

Successful Response

- WebhookEndpointCreated: ``WebhookEndpointOut`` plus the one-time secret. Returned by create and rotate only.
  - `id` string, uuid, required
  - `label` string, required
  - `url` string, required
  - `subscribed_events` string[], required
  - `enabled` boolean, required
  - `consecutive_failures` integer, required
  - `last_error` string, nullable, required
  - `last_delivery_at` string, date-time, nullable, required
  - `created` string, date-time, required
  - `signing_secret` string, required

## Other responses

- `401`: Missing or invalid credentials.
- `403`: The credential is valid but not authorized for this action.
- `404`: The resource, or the business named in the request, does not exist.
- `422`: Validation Error
- `default`: Unexpected error.

---

[API](https://skmtc.dev/izap/apis/izap-api.md) · [All operations](https://skmtc.dev/izap/apis/izap-api/llms.txt) · [OpenAPI document](https://skmtc.dev/izap/apis/izap-api/revisions/e6358c8bf5e9?raw)