Skip to main content
Alerting & Response/Alert Channels & Integrations
POSTAlertingSince 1.0SynchronousAuth Required

RotateAlertWebhookSecret

Rotate the HMAC signing secret for a webhook endpoint

Execution Availability

Try It Out

Submit a mock request using the current auth context and example-driven inputs.

Path Parameters

Request Inputs

Path Parameters

  • endpointIdStringRequired

    Endpoint identifier to rotate secret for

Responses

200 OK

On success, this API returns the following response structure.

  • endpointObject

    Updated webhook endpoint details

    • idString

      Unique identifier of the webhook endpoint

      Example: wh-001

    • nameString

      Human-readable name for the endpoint

      Example: Slack Webhook

    • urlString

      Target URL for webhook delivery

      Example: https://hooks.slack.com/services/T00/B00/xxx

    • signingEnabledBoolean

      Whether HMAC signing is enabled for this endpoint

      Example: true

    • signingSecretMaskedString

      Masked signing secret (last 4 chars visible)

      Example: ****abc1

    • createdAtString

      Timestamp when the endpoint was created

      Example: 2026-01-15T08:00:00Z

    • updatedAtString

      Timestamp of the last endpoint update

      Example: 2026-01-15T08:00:00Z

  • signingSecretPlaintextString

    New plaintext signing secret (shown only once)

    Example: whsec_new789ghi012

Endpoint

POST/api/v1/alerting/webhook-endpoints/{endpointId}/rotate-secret

/api/v1/alerting/webhook-endpoints/{endpointId}/rotate-secret

Operation ID

RotateAlertWebhookSecret

Permalink

Request Example

curl -X POST '{host}/api/v1/alerting/webhook-endpoints/{endpointId}/rotate-secret' -H 'Authorization: Bearer {token}' -H 'Content-Type: application/json' -d '{}'

Response Example

200
{
  "endpoint": {},
  "signingSecretPlaintext": "whsec_new789ghi012"
}

Change History

This API has no change history records yet.

View all change history