API ReferenceWebhooks
Rotate a webhook's signing secret
Generates a new signing secret for one webhook and returns the new plaintext value once.
POST
/api/webhooks/{id}/rotate-secretGenerates a new signing secret for one webhook and returns the new plaintext value once. Store the returned secret immediately, because later reads only keep the encrypted version.
Endpoint requirements
- Credentials
- Use either
Bearer API keyorX-API-Key header. - Required scope
webhooks:write- Module
- Automation & API module (
api_access) - Organization and site scope
- Requests can access only resources owned by the authenticated organization. The API does not reveal whether an identifier belongs to another organization or site.
- Retry behavior
- Convergent write: Retrying leaves the resource in the same resulting state. If the first request succeeded, a later retry may return conflict or not found because the change has already taken effect.
Path Parameters
id*string
Path parameter. Unique identifier of this resource.
Match
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$Format
uuidResponse Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
{ "id": "11111111-1111-4111-8111-111111111111", "secret": "generated-signing-secret-returned-once"}Request examples
curl
curl --request POST \
'https://api.convor.io/api/webhooks/11111111-1111-4111-8111-111111111111/rotate-secret' \
--header 'Accept: application/json' \
--header 'Authorization: Bearer convor_sk_...'JavaScript
const response = await fetch("https://api.convor.io/api/webhooks/11111111-1111-4111-8111-111111111111/rotate-secret", {
method: "POST",
headers: {
"Accept": "application/json",
"Authorization": "Bearer convor_sk_..."
},
});
const contentType = response.headers.get("content-type") ?? "";
const data = response.status === 204
? null
: contentType.includes("json")
? await response.json()
: contentType.startsWith("text/")
? await response.text()
: await response.blob();
if (!response.ok) {
const message = typeof data === "object" && data !== null
&& "error" in data && typeof data.error === "object"
&& data.error !== null && "message" in data.error
? String(data.error.message)
: "Convor API request failed (" + response.status + ")";
throw new Error(message);
}
console.log(data);Was this page helpful?