Rotate the signing secret

post

https://app.ekas.io/v1/webhook-endpoints/{id}/rotate-secret

Issues a new whsec_... secret, returned once in this response. The old secret remains valid for 24 hours — deliveries carry two v1= signature entries during this dual-signature window so consumers can migrate without dropped verifications. Rotation is audit-logged.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

Language

Credentials

Bearer

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200The endpoint with the new secret present.

400Invalid request (malformed body, missing/invalid parameter).

401Missing or invalid API key.

403API key lacks a required scope (named in error.param) or test-only endpoint called with a live key.

404No such resource (or it belongs to another mode/subaccount).

409Invalid state transition, in-flight registration conflict, or idempotency key reuse with a different body.

429Rate limit exceeded; see Retry-After. RateLimit-* headers appear on every response, not only 429s.