# Flowg8 · Rotate signing secret

Generate a new secret; the old secret stops being used immediately.



## POST /v1/webhook-endpoints/{endpointId}/rotate-secret

Authentication: FLOWG8_ACCESS_TOKEN from Flowg8 sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator or Sandbox developer required. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Input parameters
- revision (integer, required): min 1 · max 9007199254740991

## Request example (replace example IDs)

```sh
curl -X POST "https://api.flowg8.io/v1/webhook-endpoints/endpointId/rotate-secret" \
  -H "authorization: Bearer $FLOWG8_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001" \
  -H "idempotency-key: example-rotate-webhook-secret-001" \
  -H "content-type: application/json" \
  --data-raw '{
  "revision": 1
}'
```

Source: /docs/rotate-webhook-secret
Full schemas: /docs/openapi.json