Skip to main content
ZStack
Alerting & Response/Alert Channels & Integrations

RotateAlertWebhookSecret

Rotate the HMAC signing secret for a webhook endpoint

POST/api/v1/alerting/webhook-endpoints/{endpointId}/rotate-secret

Operation ID

RotateAlertWebhookSecret

Since

1.0.0

Execution Mode

Synchronous

Auth Context

Auth Required

Auth Context

Send these values as request headers when calling this API.

AuthorizationstringRequired

Bearer Token

X-Tenant-IDstring

X-Tenant-ID

Request Inputs

Path Parameters

  • endpointId
    StringRequired

    Endpoint identifier to rotate secret for

Responses

200 OK
200 OK

On success, this API returns the following response structure.

  • endpoint
    Object

    Updated webhook endpoint details

    • id
      String

      Unique identifier of the webhook endpoint

      Example: wh-001

    • name
      String

      Human-readable name for the endpoint

      Example: Slack Webhook

    • url
      String

      Target URL for webhook delivery

      Example: https://hooks.slack.com/services/T00/B00/xxx

    • signingEnabled
      Boolean

      Whether HMAC signing is enabled for this endpoint

      Example: true

    • signingSecretMasked
      String

      Masked signing secret (last 4 chars visible)

      Example: ****abc1

    • createdAt
      String

      Timestamp when the endpoint was created

      Example: 2026-01-15T08:00:00Z

    • updatedAt
      String

      Timestamp of the last endpoint update

      Example: 2026-01-15T08:00:00Z

  • signingSecretPlaintext
    String

    New plaintext signing secret (shown only once)

    Example: whsec_new789ghi012