> ## Documentation Index
> Fetch the complete documentation index at: https://docs.inklink.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate webhook signing secret

> Issues a new **`secret`** (`whsec_…`) for the endpoint. The previous secret stops verifying new deliveries immediately after rotation. The new secret is returned **once** in this response. Requires **organization owner** or **admin**. See [Webhooks](/webhooks).



## OpenAPI

````yaml /api-reference/openapi.json POST /webhook/endpoints/{id}/rotate-secret
openapi: 3.0.3
info:
  title: API 2.0
  version: 1.0.0
  contact: {}
servers:
  - url: https://platform.inklink.com/api/v1
security: []
tags: []
paths:
  /webhook/endpoints/{id}/rotate-secret:
    post:
      summary: Rotate webhook signing secret
      description: >-
        Issues a new **`secret`** (`whsec_…`) for the endpoint. The previous
        secret stops verifying new deliveries immediately after rotation. The
        new secret is returned **once** in this response. Requires
        **organization owner** or **admin**. See [Webhooks](/webhooks).
      operationId: rotateWebhookEndpointSecret
      parameters:
        - name: api-key
          in: header
          schema:
            type: string
            example: secret_live_xxx
          required: true
        - name: id
          in: path
          required: true
          description: Webhook endpoint id (`wh_end_…`).
          schema:
            type: string
            example: wh_end_xxx
      responses:
        '200':
          description: New secret issued.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/webhookRotateSecretResponse'
        '401':
          description: Not authenticated (`UNAUTHORIZED`).
        '500':
          description: >-
            Server error, endpoint not found, or permission denied
            (`INTERNAL_ERROR`).
components:
  schemas:
    webhookRotateSecretResponse:
      type: object
      required:
        - secret
      properties:
        secret:
          type: string
          description: New signing secret (`whsec_…`). Shown only in this response.

````