curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
-H "Authorization: Bearer $TOKEN"
{
"success": true,
"data": {
"id": "...",
"appId": "...",
"environment": "live",
"serviceType": "kyc_widget",
"endpoint": "https://...",
"isActive": true,
"signingSecret": "whsec_...",
"createdAt": "..."
}
}
Developers
Rotate webhook secret
Generate a new signing secret for a webhook. The old secret stops working immediately.
POST
/
v1
/
developers
/
webhooks
/
{id}
/
rotate-secret
curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
-H "Authorization: Bearer $TOKEN"
{
"success": true,
"data": {
"id": "...",
"appId": "...",
"environment": "live",
"serviceType": "kyc_widget",
"endpoint": "https://...",
"isActive": true,
"signingSecret": "whsec_...",
"createdAt": "..."
}
}
Rotates the signing secret for a webhook subscription. A new
Returns
signingSecret (whsec_...) is generated and returned in full, once. The previous secret stops verifying deliveries immediately.
Path parameters
string
required
The webhook ID to rotate the signing secret for.
Body
No request body.curl -X POST https://api.vouchmark.com/v1/developers/webhooks/.../rotate-secret \
-H "Authorization: Bearer $TOKEN"
{
"success": true,
"data": {
"id": "...",
"appId": "...",
"environment": "live",
"serviceType": "kyc_widget",
"endpoint": "https://...",
"isActive": true,
"signingSecret": "whsec_...",
"createdAt": "..."
}
}
201 Created.
The previous signing secret stops verifying deliveries immediately. Update every
integration that verifies this webhook with the new
signingSecret in lockstep. The full
secret is returned only here — store it securely now, it cannot be retrieved later. See
Verifying the signature.Response fields
boolean
object
Show webhook
Show webhook
string
string
string
One of
sandbox or live.string
One of
kyc_widget, verification, trust_monitor, disputes.string
boolean
Whether the subscription is active and receiving deliveries.
string
The new full signing secret (
whsec_...), returned once. Use it to verify the
X-Vouchmark-Signature header on deliveries.string