---
title: "Rotate Webhook Token"
method: POST
path: "/api/webhooks/{agent_id}/token/rotate"
tags: ["webhooks"]
---

# Rotate Webhook Token

`POST /api/webhooks/{agent_id}/token/rotate`

## Request

- Base URL: `https://api.maritime.sh` (the document declares no server; this is the origin it was published from)
- URL: `https://api.maritime.sh/api/webhooks/{agent_id}/token/rotate`
- Auth: HTTP bearer

Replaces the agent's invoke token with a new stored secret.

The previous token stops opening the invoke URL at once. The derived
internal token the VM holds is not affected. Update every caller that
holds the URL (for example a partner's delivery target) with the new one.

## Path parameters

- `agent_id` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/maritime/apis/maritime-api.md) - [All operations](https://skmtc.dev/maritime/apis/maritime-api/llms.txt) - [OpenAPI document](https://skmtc.dev/maritime/apis/maritime-api/revisions/acd712090ad6?raw)