---
title: "Rotate webhook HMAC secret"
method: POST
path: "/api/v1/webhooks/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate webhook HMAC secret

`POST /api/v1/webhooks/{id}/rotate-secret`

## Request

- Base URL: `https://numonic.ai`
- URL: `https://numonic.ai/api/v1/webhooks/{id}/rotate-secret`
- Auth: API key in header `x-api-key`

Generate a new HMAC signing secret for a webhook.

## Path parameters

- `id` string, required: Webhook hash (40-char hex SHA-1)

## Response `200`

New secret generated (shown once)

- WebhookCreatedResponse
  - `id` string, required
  - `name` string, required
  - `url` string, uri, required
  - `events` string[], required
  - `enabled` boolean, required
  - `secret` string, required: HMAC-SHA256 signing secret — shown only once. Store securely.
  - `created_at` string, required

## Other responses

- `404`: Webhook not found

---

[API](https://skmtc.dev/numonic/apis/numonic-api.md) · [All operations](https://skmtc.dev/numonic/apis/numonic-api/llms.txt) · [OpenAPI document](https://skmtc.dev/numonic/apis/numonic-api/revisions/6c559bef1e35?raw)