---
title: "Rotate Agent Webhook Token"
method: POST
path: "/api/agent-triggers/{trigger_id}/rotate-token"
tags: ["agent-triggers"]
---

# Rotate Agent Webhook Token

`POST /api/agent-triggers/{trigger_id}/rotate-token`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/api/agent-triggers/{trigger_id}/rotate-token`
- Auth: none declared

Re-mint a webhook trigger's delivery token (TOS-2081).

The only recovery path for a token that was lost, and the revocation path
for one that leaked. There is deliberately no GET counterpart: nothing can
read an existing token back, so this endpoint is the whole surface.

## Path parameters

- `trigger_id` string, uuid, required

## Headers

- `x-impersonate-identity-id` string, nullable

## Response `200`

Successful Response

- RotateWebhookTokenResponse: TOS-2081. Same shape as create, for the same reason: the new token is readable exactly once, here, and the old one is dead as of this response.
  - `trigger` AgentTriggerResponse, required
    - `id` string, uuid, required
    - `owner_identity_id` string, uuid, required
    - `agent_identity_id` string, uuid, required
    - `target_chat_id` string, uuid, required
    - `trigger_kind` string, required
    - `status` string, required
    - `execution_mode` string, required
    - `instruction` string, required
    - `context_mode` 'adaptive' | 'literal', nullable, required
    - `timezone` string, required
    - `run_at` string, nullable, required
    - `interval_minutes` integer, nullable, required
    - `cron_expr` string, nullable, required
    - `next_run_at` string, nullable, required
    - `last_run_at` string, nullable, required
    - `last_run_status` string, nullable, required
    - `consecutive_failure_count` integer, required
    - `auto_paused_reason` string, nullable, required
    - `action_type` string, required
    - `email_to` string, nullable, required
    - `email_subject` string, nullable, required
    - `webhook_last_delivery_at` string, nullable, required
    - `webhook_signing_required` boolean, required
    - `metadata` object, required
    - `created_at` string, required
    - `updated_at` string, required
  - `delivery_token` string, required
  - `delivery_url` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/ce2c2ce318b1?raw)