---
title: "Rotate Tenant Webhook Secret"
method: POST
path: "/v1/auth/webhook-secret"
tags: ["Authentication & API Keys"]
---

# Rotate Tenant Webhook Secret

`POST /v1/auth/webhook-secret`

## Request

- Base URL: `https://api.vectelos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.vectelos.com/v1/auth/webhook-secret`
- Auth: none declared

Issue a fresh webhook signing secret. Payloads sent after this are signed
with the new value, so update the receiver first.

## Headers

- `authorization` string, nullable: Bearer <JWT session token>

## Cookies

- `vx_session` string, nullable

## Response `201`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vectelos/apis/vectelos-api.md) · [All operations](https://skmtc.dev/vectelos/apis/vectelos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vectelos/apis/vectelos-api/revisions/8e68c96f24fa?raw)