---
title: "Rotate Secret"
method: POST
path: "/api/v1/webhooks/{endpoint_id}/rotate"
tags: ["webhooks"]
---

# Rotate Secret

`POST /api/v1/webhooks/{endpoint_id}/rotate`

## Request

- Base URL: `https://legalize.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://legalize.dev/api/v1/webhooks/{endpoint_id}/rotate`
- Auth: API key in header `Authorization`

Issue a new signing secret. Returned ONCE, and the old one stops working now.

Two path segments, so no `/{endpoint_id}` route can swallow it whatever the
declaration order -- unlike `/preview`, which is a sibling of the id itself
and has to be declared before it.

## Path parameters

- `endpoint_id` integer, required

## Response `200`

Successful Response

- unknown

## Other responses

- `401`: Missing, malformed, or invalid API key
- `422`: Validation Error
- `429`: Monthly quota exceeded. Includes Retry-After header.

---

[API](https://skmtc.dev/legalize/apis/legalize-api.md) · [All operations](https://skmtc.dev/legalize/apis/legalize-api/llms.txt) · [OpenAPI document](https://skmtc.dev/legalize/apis/legalize-api/revisions/305b67a14660?raw)