---
title: "Rotate the signing secret"
method: POST
path: "/v3/audit-log-destinations/{destination_id}/rotate-secret"
tags: ["Audit Log Destinations"]
---

# Rotate the signing secret

`POST /v3/audit-log-destinations/{destination_id}/rotate-secret`

## Request

- Base URL: `https://my.orq.ai`
- URL: `https://my.orq.ai/v3/audit-log-destinations/{destination_id}/rotate-secret`
- Auth: HTTP bearer

Generates a new signing secret for the destination. Deliveries attempted after the rotation are signed with the new secret. The new secret is returned once in this response and never again.

## Path parameters

- `destination_id` string, required

## Response `200`

OK

- RotateAuditLogDestinationSecretResponse
  - `destination` AuditLogDestination, required
    - `id` string, required
    - `display_name` string, required: Human-readable destination name, unique within the workspace.
    - `description` string: Optional description of the receiving system.
    - `url` string, required: HTTPS endpoint that receives signed audit log events.
    - `status` 'AUDIT_LOG_DESTINATION_STATUS_ACTIVE' | 'AUDIT_LOG_DESTINATION_STATUS_PAUSED', required
    - `signing_secret_hint` string: Last four characters of the current signing secret, to tell rotations apart.
    - `secret_rotated_at` string, date-time: Time the current signing secret was issued.
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `created_by_id` string
    - `updated_by_id` string
  - `signing_secret` string, required: New signing secret. Shown only in this response; store it securely.

## Other responses

- `401`: Authentication required. See https://docs.orq.ai/reference/errors for the error codes.

## Changes

> 554 revisions in range; 71 not diffed.

- **2026-10-23** `0b4e519a544f`: 1 info
  - endpoint added
- **2026-10-23** `732aed62833a`: 1 breaking
  - api path removed without deprecation
- **2026-10-22** `4f826b2c3a0e`: 1 info
  - endpoint added
- **2026-10-22** `8f0dc569f247`: 1 breaking
  - api path removed without deprecation
- **2026-10-21** `08b800d640e6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/orq-ai/apis/orq-ai-api/changes/v3/audit-log-destinations/:destination_id/rotate-secret/post.md)

---

[API](https://skmtc.dev/orq-ai/apis/orq-ai-api.md) - [All operations](https://skmtc.dev/orq-ai/apis/orq-ai-api/llms.txt) - [OpenAPI document](https://skmtc.dev/orq-ai/apis/orq-ai-api/revisions/928a71e92252?raw)