Skip to main content
POST
Rotate signing secret

Authorizations

x-api-key
string
header
required

Echo API key — format: echo_<64 hex chars>. Returned once on signup.

Path Parameters

projectId
string<uuid>
required
webhookId
string<uuid>
required

Response

New secret

New secret shown once. Update your server's HMAC verification immediately.

signing_secret
string
Example:

"whsec_a1b2c3d4e5f6789012345678901234567890123456789012345678901234abcd"