Skip to main content
POST
Rotate a subscription's signing secret

Authorizations

Authorization
string
header
required

Organization-scoped Mailr API key. Header: Authorization: Bearer ak_….

Body

application/json
id
string<uuid>
target_url
string<uri>
event
enum<string>
default:lead.created
Available options:
lead.created

Response

Rotated. The returned secret is shown only this once.

id
string<uuid>
required
signing_secret
string | null
required

Hex secret for HMAC verification. Present only when the subscription was just created (or via /api/v1/webhooks/rotate) — an idempotent re-subscribe returns null, as does a pre-signing subscription (delivered unsigned).