Account

Get webhook signing secret

Changed on

Returns the webhook signing secret for your account. If no secret exists yet, one is generated automatically on first access.

Signing is account-scoped, not per-endpoint. Every webhook delivery from any of your registered endpoints is signed with this single secret. Rotate via POST /account/webhook-secret/rotate.

Secret format: the returned string looks base64-shaped (e.g. XNHBBW8VqoBjRfNs1tkZj11jTk...) but is NOT base64. Use it AS-IS as a UTF-8 string when computing HMAC over a delivery body. Base64-decoding before HMAC will silently produce mismatched signatures.

See the API-level "Webhook signing" section for the full wire format (header name, signed string shape, hash algo, tolerance) including a language-agnostic verification recipe.

get/account/webhook-secret

Request

  • Base URL: https://api.primitive.dev/v1
  • URL: https://api.primitive.dev/v1/account/webhook-secret
  • Auth: HTTP bearer

Response

Webhook secret

successboolean required

Changes

    • info

      removed the invalid_signup_code enum value from the / response property for the response status

    • info

      removed the invalid_signup_code enum value from the / response property for the response status

    • warning

      added the new not_a_repeating_send enum value to the / response property for the response status

    • warning

      added the new not_a_repeating_send enum value to the / response property for the response status

    • warning

      added the new repeat_idle_requires_internal_recipient enum value to the / response property for the response status

    • warning

      added the new repeat_idle_requires_internal_recipient enum value to the / response property for the response status

    • warning

      added the new repeat_recipient_external enum value to the / response property for the response status

    • warning

      added the new repeat_recipient_external enum value to the / response property for the response status

    • warning

      added the new repeat_stop_not_allowed enum value to the / response property for the response status

    • warning

      added the new repeat_stop_not_allowed enum value to the / response property for the response status

    • warning

      added the new repeat_unsupported enum value to the / response property for the response status

    • warning

      added the new repeat_unsupported enum value to the / response property for the response status