Call Lens

Rotate the signing secret

POST
/webhooks/{webhook}/secret

Authorization

ApiKey webhooks:manage
AuthorizationBearer <token>

Authorization: Bearer clk_{tenant_id}_{secret}. The header X-Api-Key carrying the same value is also accepted, for integration platforms that cannot set an Authorization header. Keys are minted in the Call Lens dashboard.

In: header

Scope: webhooks:manage

Path Parameters

webhook*string

The endpoint's identifier, as returned by POST /webhooks. This is a hashid — an opaque, encoded string, never an integer. Internal integer ids never cross the API boundary.

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhooks/string/secret"
{  "success": true,  "message": "Signing secret rotated.",  "data": {    "id": "string",    "url": "string",    "active": true,    "description": "string",    "events": [      "call.completed"    ],    "last_delivered_at": "2019-08-24T14:15:22Z",    "created_at": "2019-08-24T14:15:22Z",    "secret": "string",    "warning": "string"  }}