Webhooks

Rotate webhook secret

Replaces the webhook's signing secret. Deliveries from now on are signed with the new secret, which the response returns; the old one stops matching at once.

post/webhooks/{webhook}/rotate-secret

Request

  • Base URL: https://app.trypost.it/api
  • URL: https://app.trypost.it/api/webhooks/{webhook}/rotate-secret
  • Auth: HTTP bearer

Response

The webhook with its new signing secret.

idstring uuid
endpointstring uri
eventsWebhookEventType[]
status'enabled' | 'disabled' | 'paused'

paused is set by TryPost after 5 failed deliveries in a row (the account owner is emailed). Set status: enabled to resume.

last_sent_atstring date-time nullable

ISO 8601, UTC.

paused_atstring date-time nullable

ISO 8601, UTC.

consecutive_failuresinteger
signing_secretstring

Secret used to sign deliveries (whsec_ and 32 characters). Only returned when you create, get or rotate the webhook.

created_atstring date-time

ISO 8601, UTC.

updated_atstring date-time

ISO 8601, UTC.

Example response

{
  "last_sent_at": "2026-10-08T14:00:03+00:00",
  "signing_secret": "whsec_4qXbV8kP2mT7nR1sW9yZ3cE6hJ0aL5dF",
  "created_at": "2026-09-15T10:00:00+00:00",
  "updated_at": "2026-10-08T14:00:03+00:00"
}

Changes

No recorded changes to this operation across all 1 revision of this API.