---
title: "Rotate webhook signing secret"
method: POST
path: "/v1/webhooks/endpoints/{id}/rotate-secret"
tags: ["Webhooks"]
---

# Rotate webhook signing secret

`POST /v1/webhooks/endpoints/{id}/rotate-secret`

## Request

- Base URL: `https://api.sandbox.thrivory.com`
- URL: `https://api.sandbox.thrivory.com/v1/webhooks/endpoints/{id}/rotate-secret`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://api.thrivory.com/v1/oauth/token` scopes: `claims:read`, `claims:write`, `settlements:write`, `metadata:read`, `webhooks:manage`, `imports:write`, `payouts:write`

## Path parameters

- `id` string, required

## Headers

- `Idempotency-Key` string

## Response `200`

New secret issued

- object
  - `secret_last4` string

## Other responses

- `401`: 401 Unauthorized
- `404`: 404 Not Found
- `500`: 500 Server Error

## Changes

- **2025-09-11** `d3470b9a79f0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/thrivory-com/apis/thrivory-thrivenow-api/changes/v1/webhooks/endpoints/:id/rotate-secret/post.md)

---

[API](https://skmtc.dev/thrivory-com/apis/thrivory-thrivenow-api.md) - [All operations](https://skmtc.dev/thrivory-com/apis/thrivory-thrivenow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/thrivory-com/apis/thrivory-thrivenow-api/revisions/9893450caa9b?raw)