Rotate webhook secret

curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
  -H "Authorization: Bearer $TOKEN"

{
  "success": true,
  "data": {
    "id": "...",
    "appId": "...",
    "environment": "live",
    "serviceType": "kyc_widget",
    "endpoint": "https://...",
    "isActive": true,
    "signingSecret": "whsec_...",
    "createdAt": "..."
  }
}

POST

developers

webhooks

{id}

rotate-secret

curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
  -H "Authorization: Bearer $TOKEN"

{
  "success": true,
  "data": {
    "id": "...",
    "appId": "...",
    "environment": "live",
    "serviceType": "kyc_widget",
    "endpoint": "https://...",
    "isActive": true,
    "signingSecret": "whsec_...",
    "createdAt": "..."
  }
}

Rotates the signing secret for a webhook subscription. A new signingSecret (whsec_...) is generated and returned in full, once. The previous secret stops verifying deliveries immediately.

Path parameters

string

required

The webhook ID to rotate the signing secret for.

Body

No request body.

curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
  -H "Authorization: Bearer $TOKEN"

{
  "success": true,
  "data": {
    "id": "...",
    "appId": "...",
    "environment": "live",
    "serviceType": "kyc_widget",
    "endpoint": "https://...",
    "isActive": true,
    "signingSecret": "whsec_...",
    "createdAt": "..."
  }
}

Returns 201 Created.

The previous signing secret stops verifying deliveries immediately. Update every integration that verifies this webhook with the new signingSecret in lockstep. The full secret is returned only here — store it securely now, it cannot be retrieved later. See Verifying the signature.

Response fields

boolean

object

Show webhook

string

One of sandbox or live.

string

One of kyc_widget, verification, trust_monitor, disputes.

string

boolean

Whether the subscription is active and receiving deliveries.

string

The new full signing secret (whsec_...), returned once. Use it to verify the X-Vouchmark-Signature header on deliveries.

string

Overview

Auth

Companies

Verifications

Onboarding (KYB)

Widget Embed (Runtime)

Trust Badge

Monitoring

Investigations

Disputes

Vouch AI

Compliance

Wallet & Billing

Developers

Rotate webhook secret

Path parameters

Body

Response fields

​Path parameters

​Body

​Response fields

Path parameters

Body

Response fields