Webhooks
POST /v1/webhooks/{id}/rotate-secret — Rotate the Signing Secret
Issue a new HMAC signing secret for a webhook endpoint.
POST
Rotate the signing secret
Issues a new secret and returns it once. Deliveries already queued are signed with whichever secret is current at send time, not at enqueue time — so either accept both values for a minute, or rotate during a quiet window.
Authentication required. Send your key as
Authorization: Bearer csb_pub_.... A read key is enough — managing webhooks moves no money.