> ## Documentation Index
> Fetch the complete documentation index at: https://developers.podero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate a webhook's signing secret

> Mint a fresh signing secret for the webhook, superseding the previous one — the
next delivery signs with it. The new secret is returned once in this response and
never again, so the caller must store it now. A webhook that does not exist or
belongs to another organization is reported as not found.



## OpenAPI

````yaml https://app.podero.com/api/partners/v2.0/openapi.json post /api/partners/v2.0/org/{org_id}/notifications/webhooks/{webhook_id}/rotate-secret
openapi: 3.1.0
info:
  title: Podero Partner API
  version: '2.0'
  description: >-
    This API provides a unified interaction point for Podero's partner
    companies.


    The goal of this API is to give partners easily integratable endpoints that
    don't require extensive software

    development. For this reason, the endpoints focus around user and device
    management, setting of preferences

    and high level device controls.


    While direct control of devices is implemented for special use cases such as
    pause power, we abstract away low level

    direct device steering so developers and partners can focus on delivering
    maximum value to end users.
  termsOfService: https://www.podero.com/terms-and-conditions
servers: []
security: []
paths:
  /api/partners/v2.0/org/{org_id}/notifications/webhooks/{webhook_id}/rotate-secret:
    post:
      tags:
        - Notification Webhooks
      summary: Rotate a webhook's signing secret
      description: >-
        Mint a fresh signing secret for the webhook, superseding the previous
        one — the

        next delivery signs with it. The new secret is returned once in this
        response and

        never again, so the caller must store it now. A webhook that does not
        exist or

        belongs to another organization is reported as not found.
      operationId: >-
        integrations_api_api_v2_organizations_notifications_webhooks_router_rotate_webhook_secret
      parameters:
        - in: path
          name: org_id
          schema:
            description: The organization ID of the user's organization
            format: uuid
            title: Org Id
            type: string
          required: true
          description: The organization ID of the user's organization
        - in: path
          name: webhook_id
          schema:
            description: The webhook ID
            format: uuid
            title: Webhook Id
            type: string
          required: true
          description: The webhook ID
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookSecretOutput'
      security:
        - OAuth2: []
components:
  schemas:
    WebhookSecretOutput:
      description: >-
        The response to a secret rotation: the freshly minted signing secret.
        Returned

        **once, here only** — the next delivery signs with it, and it is never
        retrievable

        again, so the caller must store it now.
      properties:
        signing_secret:
          title: Signing Secret
          type: string
      required:
        - signing_secret
      title: WebhookSecretOutput
      type: object
  securitySchemes:
    OAuth2:
      type: oauth2
      flows:
        password:
          tokenUrl: /api/partners/v2.0/auth/token
          scopes: {}
        clientCredentials:
          tokenUrl: /api/partners/v2.0/auth/token
          scopes: {}

````