Webhooks

Rotate webhook signing secret

Requires a workspace Management Token (mt-...), created at Dashboard > API > Management Tokens. Send Authorization: Bearer mt-.... Inference API keys (sk-...) and webhook signing secrets (whsec_...) are not accepted. Only the token workspace is accessible. The full whsec_ signing secret is returned only on creation or rotation. Store it securely; GET/list never return it. Rotation takes effect immediately for new deliveries; already in-flight deliveries can still use the previous secret.

post/v1/management/webhooks/{webhookId}/rotate-secret

Request

  • Base URL: https://api.tokenlab.sh
  • URL: https://api.tokenlab.sh/v1/management/webhooks/{webhookId}/rotate-secret
  • Auth: HTTP bearer

Path parameters

webhookIdstring required

Response

Rotate webhook signing secret result

idstring required
object'webhook_endpoint' required
urlstring required
eventsstring[] required
is_activeboolean required
descriptionstring nullable required
created_atstring date-time required
updated_atstring date-time required
last_delivered_atstring date-time nullable required
failure_countinteger required
secretstring required

Changes

No recorded changes to this operation across all 1 revision of this API.