---
title: "Read the BYOS signing secret (minted on first read)"
method: GET
path: "/api/recording/secret"
tags: ["Recording"]
---

# Read the BYOS signing secret (minted on first read)

`GET /api/recording/secret`

## Request

- Base URL: `https://api.wordis-bond.com`
- URL: `https://api.wordis-bond.com/api/recording/secret`
- Auth: HTTP bearer

wordis-bond signs every presigned-URL callback with this secret; verify our `wb-signature` before minting an upload URL. Requires the byosRecording capability (pro/enterprise). Rotate with POST /api/recording/secret/rotate.

## Response `200`

The signing secret + verify recipe

- object
  - `data` object, required
    - `secret` string
    - `signatureHeader` string
    - `timestampHeader` string
    - `verify` string
  - `error` union, required
    - object
    - string

## Other responses

- `401`: Missing, invalid, or revoked credentials.
- `402`: The plan does not permit this action, or the monthly quota is spent with no overage (e.g. a starter plan attempting a PSTN run). Body carries an upgrade hint; see GET /api/billing/plans.

---

[API](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api.md) · [All operations](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api/revisions/66c2d5480d84?raw)