Fetch the caller's webhook signing secret

Returns the per-user HMAC secret used to sign webhook callbacks, so receivers can verify X-Peelaway-Signature. Authenticated; read-only.

get/api/webhooks/secret

Request

  • Base URL: https://api.peelaway.io
  • URL: https://api.peelaway.io/api/webhooks/secret
  • Auth: HTTP bearer

Response

The signing secret

secretstring required

Per-user HMAC signing secret (hex). Recompute X-Peelaway-Signature with it to verify callbacks.

Changes

No recorded changes to this operation across all 1 revision of this API.