---
title: "Rotate a webhook signing secret"
method: POST
path: "/webhooks/{webhook_id}/rotate-signing-secret"
tags: ["Webhooks (v2)"]
---

# Rotate a webhook signing secret

`POST /webhooks/{webhook_id}/rotate-signing-secret`

## Request

- Base URL: `https://b2b.revolut.com/api/2.0`
- URL: `https://b2b.revolut.com/api/2.0/webhooks/{webhook_id}/rotate-signing-secret`
- Auth: HTTP bearer

Rotate a signing secret for a specific webhook.

For more information, see the guides: [About webhooks](https://developer.revolut.com/docs/guides/manage-accounts/webhooks/about-webhooks) and [Manage webhooks](https://developer.revolut.com/docs/guides/manage-accounts/webhooks/manage-webhooks#rotate-a-webhook-signing-secret).

## Path parameters

- `webhook_id` string, uuid, required

## Request body

- WebhookSigningSecretRotateRequest
  - `expiration_period` string, duration: The expiration period for the signing secret in [ISO 8601 format](https://en.wikipedia.org/wiki/ISO_8601#Durations). If set, when you rotate the secret, it continues to be valid until the expiration period has passed. Otherwise, on rotation, the secret is invalidated immediately. The maximum value is 7 days.

## Response `200`

The details of the webhook for which you rotated the signing secret

- WebhookV2
  - `id` string, uuid, required: The ID of the webhook.
  - `url` string, uri, required: The valid webhook URL that event notifications are sent to. The supported protocol is `https`.
  - `events` WebhookEventType[], required: The list of event types that you are subscribed to.
  - `signing_secret` string, required: The signing secret for the webhook.

## Other responses

- `400`: Bad Request Returned, for example, for an incorrect expiration period provided.
- `404`: Not Found
- `422`: Unprocessable Entity
- `default`: Unexpected error

---

[API](https://skmtc.dev/revolut/apis/business-api.md) - [All operations](https://skmtc.dev/revolut/apis/business-api/llms.txt) - [OpenAPI document](https://skmtc.dev/revolut/apis/business-api/revisions/be089d9fa8b4?raw)