self-serve

Mint (or rotate) the calling key's webhook signing secret (quota-free).

post/v1/keys/self/webhook-secret

Request

  • Base URL: https://api.mapmap.ai
  • URL: https://api.mapmap.ai/v1/keys/self/webhook-secret
  • Auth: one of:
    • HTTP bearer
    • API key in query parameter api_key

Response

The new secret, shown exactly once. Calling again mints another and invalidates this one, including for deliveries already in flight

created_atstring required

RFC 3339 UTC time this secret was minted.

key_idstring required

The key this secret signs for.

signature_headerstring required

The header to verify: X-MapMap-Signature, the lowercase hex HMAC-SHA256 of the raw request body under this secret.

webhook_secretstring required

The secret itself: 64 lowercase hex characters. Shown once. Calling again mints a new one and invalidates this.

Changes

No recorded changes to this operation across all 1 revision of this API.