curl --request POST \
--url https://api.questra.ai/webhooks/{id}/rotate-secret \
--header 'Authorization: Bearer <token>' \
--header 'X-Org-Id: <x-org-id>'{
"secret": "<string>"
}Generates a new signing secret for the webhook and invalidates the old one immediately. Returns the new secret — copy it immediately, it is only shown once. Update your signature verification logic before rotating in production.
curl --request POST \
--url https://api.questra.ai/webhooks/{id}/rotate-secret \
--header 'Authorization: Bearer <token>' \
--header 'X-Org-Id: <x-org-id>'{
"secret": "<string>"
}Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
New secret
The new signing secret. Store it securely — it is only returned here.