---
title: "Rotate this tenant's webhook signing secret"
method: POST
path: "/v1/webhook-secret/rotate"
---

# Rotate this tenant's webhook signing secret

`POST /v1/webhook-secret/rotate`

## Request

- Base URL: `https://api.klanexai.com`
- URL: `https://api.klanexai.com/v1/webhook-secret/rotate`
- Auth: API key in header `X-API-Key`

Mints a new secret used to HMAC-sign outbound callbacks. Callbacks sent after rotation are signed with the new secret, so update your verifier. The secret is returned only in this response.

## Response `200`

A new webhook secret. Store it now — it is shown only once.

- object
  - `tenant_id` string
  - `webhook_secret` string

## Other responses

- `401`: Missing or invalid X-API-Key.
- `429`: Per-tenant rate limit exceeded; retry after Retry-After seconds.

---

[API](https://skmtc.dev/klanexai/apis/klanex-api.md) · [All operations](https://skmtc.dev/klanexai/apis/klanex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/klanexai/apis/klanex-api/revisions/daf36597612f?raw)