---
title: "Rotate callback signing secret"
method: POST
path: "/orgs/current/callback-secret/rotate"
tags: ["Organizations"]
---

# Rotate callback signing secret

`POST /orgs/current/callback-secret/rotate`

Generates a new callback signing secret and returns it. Callbacks delivered after rotation are signed with the new secret, so update your verifier promptly (there is no dual-secret window).

## Response `200`

New callback signing secret

- object
  - `data` object, required
    - `secret` string, required — Callback signing secret (cbsec_…). Verify signed callbacks with it.

## Other responses

- `401` — Unauthorized

## Changes

> 7 revisions in range; 5 could not be searched.

- **2026-08-29** `4d10ec4266ee` — 1 info
  - api operation id `rotateCallbackSecret` was added

[Change history](https://skmtc.dev/rendobar/apis/rendobar-api/changes/orgs/current/callback-secret/rotate/post.md)

---

[API](https://skmtc.dev/rendobar/apis/rendobar-api.md) · [All operations](https://skmtc.dev/rendobar/apis/rendobar-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rendobar/rendobar-api/revisions/4d10ec4266ee/schema)