---
title: "Rotate the signing secret"
method: POST
path: "/webhook-endpoints/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate the signing secret

`POST /webhook-endpoints/{id}/rotate-secret`

## Request

- Base URL: `https://api.palisade.email`
- URL: `https://api.palisade.email/webhook-endpoints/{id}/rotate-secret`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

Issues a new signing secret and returns it once. The previous secret stops being valid immediately, so deliveries signed with it will fail verification.

## Path parameters

- `id` string, uuid, required

## Headers

- `Palisade-Version` '2025-04-30' | 'unstable', required

## Response `200`

Success

- WebhookEndpointWithSecret
  - `id` string, uuid, required
  - `url` string, uri, required
  - `description` string, nullable, required
  - `enabled_events` string[], required: Event types this endpoint receives. An empty array means every event, including ones added later — not none.
  - `status` 'ENABLED' | 'DISABLED' | 'AUTO_DISABLED', required: ENABLED receives events. DISABLED was turned off by you. AUTO_DISABLED was turned off by Palisade after repeated delivery failures and stays off until you re-enable it, which also clears the failure count.
  - `secret_reminder` string, required: Last 4 characters of the signing secret. The full secret is returned only at creation.
  - `api_version` string, required: API version the payload shape is pinned to, captured when the endpoint was created.
  - `consecutive_failures` number, required
  - `disabled_reason` string, nullable, required
  - `last_success_at` string, date-time, nullable, required
  - `last_failure_at` string, date-time, nullable, required
  - `created_by` string, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `secret` string, required: The signing secret, shown once. Store it now; it cannot be retrieved later.

---

[API](https://skmtc.dev/palisade/apis/palisade-api.md) · [All operations](https://skmtc.dev/palisade/apis/palisade-api/llms.txt) · [OpenAPI document](https://skmtc.dev/palisade/apis/palisade-api/revisions/37b4ae5a7766?raw)