Reset Webhook Signing Secret
Updated at:
Resets the signing secret of a Webhook. The request body is empty. The new signing secret is returned only in this response. Subsequent deliveries use the reset secret to compute signatures.
Prerequisites
Endpoint and authentication configured. For details, see Overview and authentication.
Endpoint
POST /webhook_endpoints/{id}/reset_secret
Path parameters
| Field | Required | Type | Description |
|---|---|---|---|
id | Yes | string | Webhook ID, format wep_<ULID> |
Request example
curl -X POST "$AGENTSTUDIO_URL/webhook_endpoints/wep_01JXX7YQGPRPV1BZXA35QE7WDP/reset_secret" \
-H "Authorization: Bearer $DASHSCOPE_API_KEY"
Response example
{
"id": "wep_01JXX7YQGPRPV1BZXA35QE7WDP",
"signing_secret": "whsec_new_xxx",
"updated_at": "2026-08-06T10:35:00Z",
"request_id": "8e1d16e4"
}
Response fields
| Field | Type | Description |
|---|---|---|
id | string | Webhook ID |
signing_secret | string | New signing secret, format whsec_ + standard Base64 text. Returned only in this response |
updated_at | string | Last update time, ISO 8601 |
request_id | string | Unique request identifier |
WarningThe new signing secret is returned only in this response. Store it securely; subsequent queries do not return it.
Error codes
| HTTP status | Error code | Description |
|---|---|---|
| 404 | 11800005 | Webhook not found, already deleted, or secret reset failed |
Is this page helpful?