Rotate webhook endpoint signing secret (admin)
Admin variant of POST /v1/webhooks/endpoints/:id/rotate-secret. Generates a new signing secret. The secret and exact deadline are returned in this non-cacheable response; reusing the same Idempotency-Key safely replays them after response loss. Store the secret securely and install it during the bounded grace period. Native and strp-compatible deliveries accept both secrets during grace; adn- and chkt-compatible deliveries keep using the previous secret until the deadline.
Authorization
bearer In: header
Path Parameters
Query Parameters
Selected merchant context
Header Parameters
Stable key for this endpoint rotation. Reuse it to recover the same secret and deadline after response loss.
Response Body
application/json
curl -X POST "https://<api-host>/v1/admin/webhook-endpoints/string/rotate-secret" \ -H "Idempotency-Key: string"{
"data": {
"secret": "string",
"graceExpiresAt": "2019-08-24T14:15:22Z"
}
}List webhook endpoints (admin)
Admin variant of GET /v1/webhooks/endpoints. Lists endpoints scoped to the caller owner level (tenant or platform). Signing secrets are never included.
Update webhook endpoint (admin)
Admin variant of PATCH /v1/webhooks/endpoints/:id. Updates mutable fields (url, events, description, status, maxAttempts). Events, if provided, REPLACE the previous subscription set.