Reveal the signing secret
The endpoint's current signing secret. Each reveal is written to the team's audit log.
api_key webhooksAuthorizationBearer <token>A team API key, made by an admin under Settings, API keys. Send it as Authorization: Bearer chk_....
Scope: webhooks
endpoint_id*stringThe endpoint's id.
The secret.
application/json- response
An endpoint's signing secret.
previous_secret_expires_at?|While the previous secret still signs too, when it stops.
nullsecret*stringThe current secret.
"whsec_C2FVsBQIhrscChlQIMV+b5sSYspob7oD7vS8nSUIQ2c="curl -X GET 'https://api.coderhelm.com/api/webhooks/endpoints/ep_01jbendpt4a7b0c3d6e9f2g5h8/secret' \ -H "Authorization: Bearer $CODERHELM_API_KEY"{ "previous_secret_expires_at": null, "secret": "whsec_C2FVsBQIhrscChlQIMV+b5sSYspob7oD7vS8nSUIQ2c="}Replay events POST
Sends the kept events made in a time range to this endpoint again, each as a new delivery with retries, oldest first. Only event types the endpoint subscribes to now are sent. Events carry their original `id`, so a receiver that already handled one can skip it. At most 500 per call; events are kept 14 days.
Rotate the signing secret POST
Makes a new secret. For `overlap_hours` (24 unless set) every request carries two signatures, one per secret, so a receiver verifying with either keeps working while you update it. Then only the new secret signs.