---
title: "Rotate Webhook Secret"
method: POST
path: "/v1/webhook_endpoints/{public_id}/rotate_secret"
tags: ["v1"]
---

# Rotate Webhook Secret

`POST /v1/webhook_endpoints/{public_id}/rotate_secret`

## Request

- Base URL: `https://thrustlab.com`
- URL: `https://thrustlab.com/v1/webhook_endpoints/{public_id}/rotate_secret`
- Auth: HTTP bearer

Generate a new secret, replace stored value, return it once.

Old secret is invalidated immediately — no overlap window. Documented
behavior per: rotate during a maintenance window.

## Path parameters

- `public_id` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thrustlab/apis/thrustlab-api.md) · [All operations](https://skmtc.dev/thrustlab/apis/thrustlab-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thrustlab/apis/thrustlab-api/revisions/c19717e52529?raw)