---
title: "Rotate webhook signing secret"
method: POST
path: "/account/webhook-secret/rotate"
tags: ["Account"]
---

# Rotate webhook signing secret

`POST /account/webhook-secret/rotate`

Generates a new webhook signing secret, replacing the current one.
Rate limited to once per 60 minutes.

## Headers

- `Idempotency-Key` string

## Response `200`

New webhook secret

- object
  - `success` true, required
  - `data` object, required
    - `secret` string, required — The webhook signing secret value

## Other responses

- `400` — Invalid request parameters
- `401` — Invalid or missing API key
- `404` — Resource not found
- `429` — Rate limit exceeded

---

[API](https://skmtc.dev/primitive/apis/primitive-api.md) · [All operations](https://skmtc.dev/primitive/apis/primitive-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/primitive/primitive-api/revisions/c2299d28022c/schema)