Webhooks

Reveal the first verified webhook signing secret once

Workspace owner/admin and MFA/passkey step-up protected. Status polling cannot consume this reveal. If it was already revealed, rotate the secret instead.

post/credits/tenants/me/webhook-secret/reveal

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/tenants/me/webhook-secret/reveal
  • Auth
    HTTP bearer

Headers

X-Locus-Step-Upstring password

Short-lived raw MFA/passkey step-up token bound to the authenticated Cognito subject. Send it alongside the dashboard Bearer token for workspace-administrator mutations when the base session does not itself prove MFA within the last ten minutes. Never send it with a tenant secret key.

Response

First signing secret

successunknown required
webhookSecretstring required

Changes

No recorded changes to this operation across all 1 revision of this API.