users

Rotate the webhook signing secret

Issue a new webhook signing secret. The previous secret stops working immediately — there is no overlap window, so update your receiver first.

Requires an interactive session and a plan that includes webhooks.

post/users/me/webhook-secret/rotate

Request

Base URL: https://api.sytecheck.app (the document declares no server; this is the origin it was published from)
URL: https://api.sytecheck.app/users/me/webhook-secret/rotate
Auth: HTTP bearer

Successful Response

secretstring required

The signing secret, as whsec_<hex>. Configure it in the receiver that verifies the X-SyteCheck-Signature header.

versioninteger required

Rotation counter. Rotating issues a new secret and immediately invalidates the previous one, so update the receiver first.

signature_max_age_secondsinteger required

How old a signed timestamp may be before a receiver should reject the delivery as a replay.

No recorded changes to this operation across all 1 revision of this API.