---
title: "Set or rotate the webhook; the signing secret is returned once"
method: PUT
path: "/api/v1/webhook"
tags: ["Account"]
---

# Set or rotate the webhook; the signing secret is returned once

`PUT /api/v1/webhook`

## Request

- Base URL: `https://overwing.ai`
- URL: `https://overwing.ai/api/v1/webhook`
- Auth: HTTP bearer

## Request body

- object
  - `url` string, uri, required: https URL (http allowed for localhost)

## Response `200`

Configured

- WebhookSecret
  - `url` string
  - `secret` string: HMAC-SHA256 signing secret. Shown once.
  - `signature_header` string
  - `signature_format` string
  - `events` string[]
  - `delivers_on` string[]

## Other responses

- `400`: Invalid URL
- `401`: Missing or invalid API key

---

[API](https://skmtc.dev/overwing/apis/overwing-api.md) · [All operations](https://skmtc.dev/overwing/apis/overwing-api/llms.txt) · [OpenAPI document](https://skmtc.dev/overwing/apis/overwing-api/revisions/ff1282d31438?raw)