---
title: "Attach a signing secret — fires only on a valid HMAC of the raw body."
method: POST
path: "/graphs/{graphId}/webhooks/{id}/signing-secret"
tags: ["webhooks"]
---

# Attach a signing secret — fires only on a valid HMAC of the raw body.

`POST /graphs/{graphId}/webhooks/{id}/signing-secret`

## Request

- Base URL: `https://api.livegraph.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.livegraph.ai/graphs/{graphId}/webhooks/{id}/signing-secret`
- Auth: one of:
  - API key in cookie `livegraph_session`
  - API key in header `x-api-key`

## Path parameters

- `graphId` string, uuid, required
- `id` string, uuid, required

## Request body

- object
  - `repo` string

## Response `200`

Success — see summary for the response shape.

## Other responses

- `4XX`: Client error — body is the shared {error, code?} envelope.

---

[API](https://skmtc.dev/livegraph/apis/livegraph-api.md) · [All operations](https://skmtc.dev/livegraph/apis/livegraph-api/llms.txt) · [OpenAPI document](https://skmtc.dev/livegraph/apis/livegraph-api/revisions/551085d7719e?raw)