users

Get the webhook signing secret

Return the secret used to verify scan webhook deliveries. Unlike an API key it can be read as often as needed — it verifies that a delivery came from us and grants no access on its own.

Requires an interactive session and a plan that includes webhooks.

get/users/me/webhook-secret

Request

  • Base URL: https://api.sytecheck.app (the document declares no server; this is the origin it was published from)
  • URL: https://api.sytecheck.app/users/me/webhook-secret
  • Auth: HTTP bearer

Response

Successful Response

secretstring required

The signing secret, as whsec_<hex>. Configure it in the receiver that verifies the X-SyteCheck-Signature header.

versioninteger required

Rotation counter. Rotating issues a new secret and immediately invalidates the previous one, so update the receiver first.

signature_max_age_secondsinteger required

How old a signed timestamp may be before a receiver should reject the delivery as a replay.

Changes

No recorded changes to this operation across all 1 revision of this API.