Skip to main content

Reset Webhook Signing Secret

Resets the signing secret of a Webhook. The request body is empty. The new signing secret is returned only in this response. Subsequent deliveries use the reset secret to compute signatures.

Prerequisites

Endpoint and authentication configured. For details, see Overview and authentication.

Endpoint

POST /webhook_endpoints/{id}/reset_secret

Path parameters

FieldRequiredTypeDescription
idYesstringWebhook ID, format wep_<ULID>

Request example

curl -X POST "$AGENTSTUDIO_URL/webhook_endpoints/wep_01JXX7YQGPRPV1BZXA35QE7WDP/reset_secret" \
  -H "Authorization: Bearer $DASHSCOPE_API_KEY"

Response example

{
  "id": "wep_01JXX7YQGPRPV1BZXA35QE7WDP",
  "signing_secret": "whsec_new_xxx",
  "updated_at": "2026-08-06T10:35:00Z",
  "request_id": "8e1d16e4"
}

Response fields

FieldTypeDescription
idstringWebhook ID
signing_secretstringNew signing secret, format whsec_ + standard Base64 text. Returned only in this response
updated_atstringLast update time, ISO 8601
request_idstringUnique request identifier
The new signing secret is returned only in this response. Store it securely; subsequent queries do not return it.

Error codes

HTTP statusError codeDescription
40411800005Webhook not found, already deleted, or secret reset failed
Flow Agent API
Sandbox API
RAG API
Long-term Memory
ParseX API
Security API
Framework Integration