Rotate webhook secret

curl -X POST https://app.trypost.it/api/webhooks/a1b2c3d4-e5f6-7890-abcd-ef1234567890/rotate-secret \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "endpoint": "https://example.com/webhooks/trypost",
  "events": ["post.published", "post.failed"],
  "status": "enabled",
  "last_sent_at": "2026-09-04T15:04:05+00:00",
  "paused_at": null,
  "consecutive_failures": 0,
  "signing_secret": "whsec_newsecretabcdefghijklmnopqrstuv",
  "created_at": "2026-09-01T12:00:00+00:00",
  "updated_at": "2026-09-04T16:30:00+00:00"
}

POST

webhooks

{webhook}

rotate-secret

curl -X POST https://app.trypost.it/api/webhooks/a1b2c3d4-e5f6-7890-abcd-ef1234567890/rotate-secret \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "endpoint": "https://example.com/webhooks/trypost",
  "events": ["post.published", "post.failed"],
  "status": "enabled",
  "last_sent_at": "2026-09-04T15:04:05+00:00",
  "paused_at": null,
  "consecutive_failures": 0,
  "signing_secret": "whsec_newsecretabcdefghijklmnopqrstuv",
  "created_at": "2026-09-01T12:00:00+00:00",
  "updated_at": "2026-09-04T16:30:00+00:00"
}

Requires manage webhooks permission (Owner / Admin). Other-workspace IDs return 404. Update your receiver with the new secret before or immediately after this call. The next attempt — including a retry already queued — signs with the new secret. Deliveries that still verify against the old secret will fail.

Request

string

required

The webhook UUID whose secret should be rotated.

Response

Returns the webhook including the new signing_secret. Same shape as GET /webhooks/{webhook}.

curl -X POST https://app.trypost.it/api/webhooks/a1b2c3d4-e5f6-7890-abcd-ef1234567890/rotate-secret \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "endpoint": "https://example.com/webhooks/trypost",
  "events": ["post.published", "post.failed"],
  "status": "enabled",
  "last_sent_at": "2026-09-04T15:04:05+00:00",
  "paused_at": null,
  "consecutive_failures": 0,
  "signing_secret": "whsec_newsecretabcdefghijklmnopqrstuv",
  "created_at": "2026-09-01T12:00:00+00:00",
  "updated_at": "2026-09-04T16:30:00+00:00"
}

Overview

Posts

Platforms

Workspace

Assets

Signatures

Labels

Social Accounts

API Keys

Webhooks

Request

Response

​Request

​Response

Request

Response