---
title: "Rotate Secret"
method: POST
path: "/v1/webhooks/rotate-secret"
tags: ["Webhooks"]
---

# Rotate Secret

`POST /v1/webhooks/rotate-secret`

## Request

- Base URL: `https://api.trackcourier.io` (the document declares no server; this is the origin it was published from)
- URL: `https://api.trackcourier.io/v1/webhooks/rotate-secret`
- Auth: API key in header `X-API-Key`
- TypeScript: <https://skmtc.dev/trackcourier/apis/trackcourier-io-api/docs/v1/webhooks/rotate-secret/post.ts> (a function with typed inputs; its response is checked against the schema)

Rotate the customer's webhook signing secret (D13, top-level).

All of the customer's webhook endpoints flip to the new secret atomically.
Returns the new raw secret once.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/trackcourier/apis/trackcourier-io-api.md) - [All operations](https://skmtc.dev/trackcourier/apis/trackcourier-io-api/llms.txt) - [OpenAPI document](https://skmtc.dev/trackcourier/apis/trackcourier-io-api/revisions/2c7fa1f695ef?raw)