---
title: "Rotate callback signing secret"
method: POST
path: "/orgs/current/callback-secret/rotate"
tags: ["Organizations"]
---

# Rotate callback signing secret

`POST /orgs/current/callback-secret/rotate`

Generates a new callback signing secret and returns it. Callbacks delivered after rotation are signed with the new secret, so update your verifier promptly (there is no dual-secret window).

## Response `200`

New callback signing secret

- object
  - `data` object, required
    - `secret` string, required — Callback signing secret (cbsec_…). Verify signed callbacks with it.

## Other responses

- `401` — Unauthorized

## Changes

- **2026-08-31** `fafe355d0698` — 1 info
  - the security scope `webhooks:write` was added to the endpoint's security scheme `bearerAuth`
- **2026-08-29** `4d10ec4266ee` — 1 info
  - api operation id `rotateCallbackSecret` was added
- **2026-07-26** `ad4351c79853` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/rendobar/apis/rendobar-api/changes/orgs/current/callback-secret/rotate/post.md)

---

[API](https://skmtc.dev/rendobar/apis/rendobar-api.md) · [All operations](https://skmtc.dev/rendobar/apis/rendobar-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendobar/apis/rendobar-api/revisions/14f92fdd491f?raw)