---
title: "Rotate the signing secret (shown once)"
method: POST
path: "/api/webhooks/{id}/rotate"
tags: ["Webhooks"]
---

# Rotate the signing secret (shown once)

`POST /api/webhooks/{id}/rotate`

## Request

- Base URL: `https://twitr.sh`
- URL: `https://twitr.sh/api/webhooks/{id}/rotate`
- Auth: API key in header `SIGN-IN-WITH-X`

The old secret stops verifying immediately.

## Path parameters

- `id` string, required

## Response `200`

{id, secret, rotated_at} — store the secret now.

## Other responses

- `402`: Identity Required.
- `403`: Not your webhook.

---

[API](https://skmtc.dev/twitr/apis/twitr-sh.md) · [All operations](https://skmtc.dev/twitr/apis/twitr-sh/llms.txt) · [OpenAPI document](https://skmtc.dev/twitr/apis/twitr-sh/revisions/f6390fcee344?raw)