Agents

Mint or rotate the webhook signing secret

Mint (or rotate) your org's webhook signing secret and return it once. Verify the X-PyAI-Signature on post-call extraction (and transcription-job) webhooks with it: HMAC-SHA256 over "<t>.<rawBody>". Zero-drop rotation: deploy verification that accepts both the old and new secret, call this, then drop the old one. Requires the omni:session scope.

post/v1/webhooks/signing-secret

Request

  • Base URL: https://api.pyai.com
  • URL: https://api.pyai.com/v1/webhooks/signing-secret
  • Auth: one of:
    • HTTP bearer
    • API key in header x-api-key

Response

The new secret (shown once)

objectstring
secretstring

The signing secret (whsec_…). Stored server-side; shown only in this response.

created_atinteger

Example response

{
  "object": "webhook_signing_secret"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.