---
title: "Configure webhook secret"
method: POST
path: "/v1/account/settings/webhook/rotate-secret"
tags: ["Webhooks"]
---

# Configure webhook secret

`POST /v1/account/settings/webhook/rotate-secret`

## Request

- Base URL: `https://api.ocrolus.com`
- URL: `https://api.ocrolus.com/v1/account/settings/webhook/rotate-secret`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://auth.ocrolus.com/oauth/token`

This API configures the secret key for account-level webhook signature verification. Use this API to add a new secret or update an existing one. The secret is used to sign webhook payloads using HMAC SHA256, allowing you to verify that requests originate from Ocrolus.
> 🚧 We have a better version!
> This product is superseded by [Org Level Webhooks](doc:organization-level-webhook), which we recommend for improved functionality and integration.

## Request body

- object
  - `secret_key` string, required: The new webhook secret key. Must be between 16 and 128 characters long.

## Response `200`

Success

- object: Schema for the successful response of new secret key.
  - `response` object
    - `status` string: Indicates the request status.
    - `message` string: Confirmation message.

## Other responses

- `404`: Webhook Not Found

---

[API](https://skmtc.dev/ocrolus/apis/account-level-webhooks.md) - [All operations](https://skmtc.dev/ocrolus/apis/account-level-webhooks/llms.txt) - [OpenAPI document](https://skmtc.dev/ocrolus/apis/account-level-webhooks/revisions/aafc604fdd8a?raw)