---
title: "Install the new generation and retain the old receiver secret for five minutes. New claims use the new generation; identical rotation retries return the original protected result."
method: POST
path: "/v1/webhook-endpoints/{id}/rotate-key"
---

# Install the new generation and retain the old receiver secret for five minutes. New claims use the new generation; identical rotation retries return the original protected result.

`POST /v1/webhook-endpoints/{id}/rotate-key`

## Request

- Base URL: `http://127.0.0.1:8080`
- URL: `http://127.0.0.1:8080/v1/webhook-endpoints/{id}/rotate-key`
- Auth: HTTP bearer

Install the new generation and retain the old receiver secret for five minutes. New claims use the new generation; identical rotation retries return the original protected result.

## Path parameters

- `id` string, uuid, required

## Headers

- `X-Likerts-Workspace` string

## Request body

- WebhookOperationInput
  - `idempotencyKey` string, required

## Response `200`

Webhook operation succeeded.

- WebhookCredential
  - `endpoint` WebhookEndpoint, required
    - `id` string, uuid, required
    - `url` string, uri, required
    - `enabled` boolean, required
    - `revoked` boolean, required
    - `keyId` string, uuid, required
    - `createdAt` string, date-time, required
    - `eventTypes` string[], required: Immutable event subscriptions. Community Edition supports response.accepted.
  - `signingSecret` string, required

## Other responses

- `400`: Webhook operation error (HTTP 400).
- `401`: Webhook operation error (HTTP 401).
- `403`: Webhook operation error (HTTP 403).
- `404`: Webhook operation error (HTTP 404).
- `409`: Webhook operation error (HTTP 409).
- `410`: Webhook operation error (HTTP 410).
- `413`: Webhook operation error (HTTP 413).
- `415`: Webhook operation error (HTTP 415).
- `429`: Admission or collection rate limit reached. Honor Retry-After in seconds; admission usually returns1, the collection minute window returns60.
- `500`: Webhook operation error (HTTP 500).
- `503`: Durable response webhooks are not configured. Request admission can also be unavailable; fail closed and honor Retry-After.

---

[API](https://skmtc.dev/likerts/apis/likerts-development-api.md) · [All operations](https://skmtc.dev/likerts/apis/likerts-development-api/llms.txt) · [OpenAPI document](https://skmtc.dev/likerts/apis/likerts-development-api/revisions/c583fa096c07?raw)