---
title: "Get signing secret"
method: GET
path: "/v1/webhooks/{webhook_id}/secret"
tags: ["Webhooks"]
---

# Get signing secret

`GET /v1/webhooks/{webhook_id}/secret`

## Request

- Base URL: `https://api.winnr.app`
- URL: `https://api.winnr.app/v1/webhooks/{webhook_id}/secret`
- Auth: HTTP bearer

Retrieve the endpoint's current signing secret. During the 24-hour
grace window after a rotation, the previous secret and its expiry are
also returned.

## Path parameters

- `webhook_id` string, required

## Response `200`

Signing secret

- object
  - `data` WebhookSecretResponse
    - `webhook_id` string
    - `secret` string: Current signing secret (`whsec_...`)
    - `previous_secret` string, nullable: Previous secret, present only during the 24h grace window after a rotation (deliveries carry signatures from both secrets)
    - `previous_expires_at` string, date-time, nullable: When the previous secret stops being valid
  - `meta` Meta
    - `request_id` string
    - `timestamp` string, date-time

## Other responses

- `401`: Authentication required or token invalid
- `404`: Resource not found

---

[API](https://skmtc.dev/winnr/apis/winnr-api.md) · [All operations](https://skmtc.dev/winnr/apis/winnr-api/llms.txt) · [OpenAPI document](https://skmtc.dev/winnr/apis/winnr-api/revisions/a4f960beb1eb?raw)