Rotate the signing secret
Mints a new signing secret, returned ONCE. The old secret is invalid immediately — queued retries are re-signed with the new one.
POST
https://api.helpbento.com /v1 /webhooks /{id} /rotate-secretAuthentication
AuthorizationstringheaderBearer <token>requiredAn API key, e.g. hb_live_… (live) or hb_test_… (test).
Path parameters
1 paramidstringrequired
Header parameters
1 paramIdempotency-Keystringlength: 0…255Optional idempotency key (1–255 chars). Repeating a mutating request with the same key within 24h replays the original response instead of re-executing it; a concurrent in-flight request with the same key returns 409. Use a unique key (e.g. a UUID) per logical operation so network retries are safe.
Responses
idstringurlstringurieventsarray of stringstatusstringactive | disabledcreatedAtstringdate-timesigningSecretstringShown once. Verify the X-HelpBento-Signature header with it.
Errors