observability

A new signing secret, shown once. The old one keeps signing beside it for a while.

While both are live every delivery carries two v1 signatures, so a receiver can switch without missing one. keepPreviousSeconds: how long the old secret keeps signing, 0 to 604800 (a week); a day when omitted, 0 to end it at once.

post/v1/webhooks/{id}:rotate-secret

Request

  • Base URL: https://api.withruntime.com
  • URL: https://api.withruntime.com/v1/webhooks/{id}:rotate-secret
  • Auth: HTTP bearer

Path parameters

idstring required

Resource identifier (UUID).

Headers

Idempotency-Keystring

Replaying the same key with the same request within 24 hours returns the first result and never repeats the effect. A refusal is not kept: a request refused before it ran (no_capacity, busy, a limit) runs afresh when sent again with its key. The SDKs send one automatically; the server makes one when absent and returns it in the idempotency-key response header.

Request body

keepPreviousSecondsinteger

Response

Success

idstring required
urlstring required
descriptionstring nullable
eventsstring[] required
enabledboolean required
secretHintstring required
secretstring

The signing secret. Returned when the webhook is made (and to its own retry) and when its secret is rotated, and never again.

previousSecretExpiresAtstring nullable
createdAtstring
updatedAtstring
lastSuccessAtstring nullable
lastFailureAtstring nullable
failingSincestring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.