Skip to main content
POST
/
webhooks
/
{endpointId}
/
rotate-secret
Rotate a webhook signing secret
curl --request POST \
  --url https://apix.spotzee.com/api/client/webhooks/{endpointId}/rotate-secret \
  --header 'Authorization: Bearer <token>'
{
  "signing_secret": "whsec_5f6b9c4e2a8d3f1b..."
}

Documentation Index

Fetch the complete documentation index at: https://docs.spotzee.com/llms.txt

Use this file to discover all available pages before exploring further.

Authorizations

​
Authorization
string
header
required

Project-scoped secret API key (sk_…). Pass in the Authorization: Bearer <key> header. Grants access to the project the key was issued for.

Path Parameters

​
endpointId
integer | null

Numeric webhook endpoint identifier.

Example:

17

Response

The new plaintext signing secret.

One-time-visible signing secret returned by POST /webhooks/{endpointId}/rotate-secret. Persist it and update any downstream verifier before the next event fires.

​
signing_secret
string
required

New plaintext signing secret. Returned exactly once — store it now. The previous secret stops verifying deliveries the moment this call returns.

Example:

"whsec_5f6b9c4e2a8d3f1b..."