Rotate webhook endpoint signing secret
Generates a new signing secret for the specified endpoint. The secret and exact deadline are returned in this non-cacheable response; reusing the same Idempotency-Key safely replays them after response loss. Store the secret securely and install it during the bounded grace period. Native and strp-compatible deliveries accept both secrets during grace; adn- and chkt-compatible deliveries keep using the previous secret until the deadline.
Authorization
bearer In: header
Path Parameters
Header Parameters
Stable key for this endpoint rotation. Reuse it to recover the same secret and deadline after response loss.
Response Body
application/json
curl -X POST "https://<api-host>/v1/webhooks/endpoints/string/rotate-secret" \ -H "Idempotency-Key: string"{
"data": {
"secret": "string",
"graceExpiresAt": "2019-08-24T14:15:22Z"
}
}List available webhook event types
Returns the catalog of event types the caller may subscribe to. Results are filtered by the caller owner level (merchant, tenant, or platform) — lower-privilege callers see a narrower catalog. Use this list to discover valid values for the `events` field when creating or updating a webhook endpoint.
Update webhook endpoint
Updates mutable fields of a webhook endpoint (url, events, description, status, maxAttempts). Only fields included in the body are changed. Events, if provided, REPLACE the previous subscription set — no partial merge. Use `status: "disabled"` to pause deliveries without deleting the endpoint. Send `maxAttempts: null` to fall back to the platform default; `stripe_compat` endpoints ignore it and keep their own retry schedule.