Studio

Get Webhook Secret

Return the authenticated developer's webhook signing secret.

This is the per-developer HMAC key used to sign the X-Phota-Signature header on async job callbacks; partners fetch it once to verify callback authenticity. The secret is minted lazily on first use. Scoped strictly to the authenticated developer (the API key yields the developer uid).

get/v2/phota/webhook-secret

Request

  • Base URL
    https://api.photalabs.com
  • Auth
    API key in header X-API-Key

Response

Successful Response

webhook_signing_secretstring required

Per-developer HMAC key for verifying the X-Phota-Signature on job callbacks.

Changes

No recorded changes to this operation across all 1 revision of this API.