Replace the signing secret of a webhook endpoint.
For a secret that leaked. The old secret stops at once: every request from now on, retries of earlier events included, is signed with the new one, which is returned only here.
For a secret that leaked. The old secret stops at once: every request from now on, retries of earlier events included, is signed with the new one, which is returned only here.
bearerAuthAuthorizationBearer <token>A Sluby API key (sluby_...) sent as Authorization: Bearer <key>. Keys carry scopes: upload, read, manage.
id*stringEndpoint id.
The new secret.
application/json- response
id*stringuuidsecret*stringThe new signing secret, shown once.
curl -X POST 'https://sluby.example.com/api/v1/webhooks/string/rotate-secret'{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "secret": "string"}Send a signed `webhook.test` event to the endpoint now. POST
Delivered once, signed like any event, and recorded with the deliveries. Answers how the receiver responded: `delivered`, `status_code` (null when no response came) and `error` (why it failed, in our words).
The endpoint's latest delivery attempts, newest first. GET
One entry per attempt: id, event_id, event, status_code, delivered, error, attempt (1 for the first try), created_at, the payload that was sent, and manual (true for a resend). Response bodies are never stored. Attempts are kept for 30 days.