---
title: "Rotate Secret"
method: POST
path: "/webhooks/{webhook_id}/rotate-secret"
tags: ["webhooks"]
---

# Rotate Secret

`POST /webhooks/{webhook_id}/rotate-secret`

## Request

- Base URL: `https://api.tickwire.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tickwire.io/webhooks/{webhook_id}/rotate-secret`
- Auth: none declared

New signing secret; the old one stays valid for ``overlapHours`` (default 24).

## Path parameters

- `webhook_id` string, required

## Headers

- `Idempotency-Key` string, nullable
- `X-Actor` string, nullable
- `X-Reason` string, nullable
- `X-API-Key` string, nullable
- `Authorization` string, nullable
- `auth-token` string, nullable

## Request body

- RotateSecret
  - `secret` string, nullable
  - `overlapHours` number

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tickwire/apis/tickwire-control-plane.md) · [All operations](https://skmtc.dev/tickwire/apis/tickwire-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/tickwire/apis/tickwire-control-plane/revisions/a4d1386fa23e?raw)
