---
title: "Rotate a tool's webhook secret"
method: POST
path: "/v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret"
tags: ["Agent Tools"]
---

# Rotate a tool's webhook secret

`POST /v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`

## Request

- Base URL: `https://api.zavu.dev`
- URL: `https://api.zavu.dev/v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`
- Auth: HTTP bearer

Generate a new signing secret for this tool. The previous one stops working on the next call, with no overlap, so update your endpoint first. The tool keeps its id, so flows that reference it by name are unaffected.

## Path parameters

- `senderId` string, required
- `toolId` string, required

## Response `200`

New secret generated.

- WebhookSecretResponse
  - `secret` string, required: The new webhook secret.

## Other responses

- `401`: Unauthorized.
- `404`: Tool not found.

## Changes

> 80 revisions in range; 1 not diffed.

- **2026-08-07** `358ec4c351c6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/changes/v1/senders/:senderId/agent/tools/:toolId/webhook/secret/post.md)

---

[API](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api.md) - [All operations](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/revisions/75bc777b0ffb?raw)