PApaywithlocus
Webhooks

Rotate the webhook signing secret

Returns the new secret once. Requires a workspace owner or admin with credentials:manage and MFA or passkey step-up completed in the last ten minutes. Deliveries contain signatures for both the current and previous secrets during a 24-hour overlap.

post/credits/tenants/me/webhook-secret/rotate

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/tenants/me/webhook-secret/rotate
  • Auth
    HTTP bearer

Headers

X-Locus-Step-Upstring password

Short-lived raw MFA/passkey step-up token bound to the authenticated Cognito subject. Send it alongside the dashboard Bearer token for workspace-administrator mutations when the base session does not itself prove MFA within the last ten minutes. Never send it with a tenant secret key.

Response

New signing secret and old-secret expiry

successunknown required
webhook_secretstring required
previous_secret_valid_untilstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.