Webhooks

Rotate a webhook secret

Generate a new signing secret for the endpoint. For 24 hours, each delivery carries two signatures in webhook-signature: one from the new secret and one from the previous secret. Deploy the new secret to your verifier before previous_secret_expires_at. After that time, deliveries carry only the new signature.

post/api/v1/webhook_endpoints/{endpoint_id}/rotate_secret

Request

Base URL
https://app.voicepanel.com
URL
https://app.voicepanel.com/api/v1/webhook_endpoints/{endpoint_id}/rotate_secret
Auth
HTTP bearer

Path parameters

endpoint_idstring required

Example:whep_9Lm2Xc7VqT4bRn

The webhook endpoint ID

Response

Successful response

idstring required

The webhook endpoint ID

secretstring required

Signing secret, prefixed whsec_. Shown once; store it to verify deliveries.

previous_secret_expires_atstring date-time nullable required

When deliveries stop carrying the previous signature

warningstring required

Reminder that the secret is not shown again

Example response

{
  "id": "whep_9Lm2Xc7VqT4bRn",
  "secret": "whsec_Zp4wN1tK7cRm9Qx2yBv6LsH8dJ3fGa5oEu0iTk2XqWc=",
  "previous_secret_expires_at": "2026-03-11T09:00:00.000Z",
  "warning": "Store this secret securely. It will not be shown again."
}

Changes

No recorded changes to this operation across all 1 revision of this API.