# Rotate the signing secret

`POST /api/webhook/outbound/rotate-secret`  (operationId: `rotateWebhookSecret`, group: Webhooks)

Replaces the signing secret and returns the new one once. Update your receiver before the next delivery.

Part of the full API, which is included in the Scale plan. Workspace admin: a dashboard session, or a full-access key created by an admin. A scoped key is refused with scope_denied.

**Response 200**: Rotated.

Example:

```json
{
  "success": true,
  "signing_secret": "41ab...07cd",
  "message": "Signing secret rotated. Save it now; it will not be shown again."
}
```

**Errors specific to this call.** The common ones (401, 403, 429 and the rest) are in the [Errors guide](https://inboxwa.online/docs/api/guide/errors.md).

| Status | error | When |
| --- | --- | --- |
| 404 | `not_configured` | No webhook is configured. |

Part of the InboxWA API reference: https://inboxwa.online/docs/api . Full reference as one document: https://inboxwa.online/docs/api.md . OpenAPI: https://inboxwa.online/openapi.json