Rotate a webhook signing secret

curl --request POST \
  --url https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "secret": "<string>",
  "id": 123,
  "url": "<string>",
  "description": "<string>",
  "is_active": true,
  "subscribed_events": [
    "message.received"
  ],
  "custom_headers": {},
  "phone_number_restrictions": [
    "<string>"
  ],
  "timeout_seconds": 123,
  "max_attempts": 123,
  "api_version": "<string>",
  "consecutive_failures": 123,
  "paused_at": "2023-11-07T05:31:56Z",
  "created_at": "2023-11-07T05:31:56Z",
  "pause_reason": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "The API is on the Pro plan. Upgrade in Billing to use live keys. Test keys keep working.",
  "code": "plan_limit_reached"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

POST

webhooks

{webhook}

rotate-secret

Rotate a webhook signing secret

curl --request POST \
  --url https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://lazyapp.in/v1/webhooks/{webhook}/rotate-secret")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "secret": "<string>",
  "id": 123,
  "url": "<string>",
  "description": "<string>",
  "is_active": true,
  "subscribed_events": [
    "message.received"
  ],
  "custom_headers": {},
  "phone_number_restrictions": [
    "<string>"
  ],
  "timeout_seconds": 123,
  "max_attempts": 123,
  "api_version": "<string>",
  "consecutive_failures": 123,
  "paused_at": "2023-11-07T05:31:56Z",
  "created_at": "2023-11-07T05:31:56Z",
  "pause_reason": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "The API is on the Pro plan. Upgrade in Billing to use live keys. Test keys keep working.",
  "code": "plan_limit_reached"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

{
  "message": "<string>",
  "code": "<string>"
}

Authorizations

Authorization

string

header

required

Your API key, e.g. sk_live_... or sk_test_....

Headers

Idempotency-Key

string

Optional. Makes this write safe to retry: the same key replays the first response instead of acting twice.

Maximum string length: 255

Path Parameters

webhook

integer

required

Endpoint id.

Response

Secret rotated.

secret

string

required

New signing secret. Shown once.

integer

url

string

description

string | null

is_active

boolean

subscribed_events

enum<string>[]

Empty means every event.

Available options:

message.received,

message.queued,

message.sent,

message.delivered,

message.read,

message.played,

message.failed,

message.deleted,

message.edited,

message.echo,

reaction.received,

conversation.started,

commerce.order,

payment.captured,

payment.failed,

payment.refunded,

payment.order_status_updated,

template.pending,

template.approved,

template.rejected,

template.paused,

template.disabled,

template.category_changed,

template.quality_changed,

template.updated,

template.deleted,

marketing.link_clicked,

otp.requested,

otp.verified,

otp.failed,

contact.updated,

contact.opted_in,

contact.opted_out,

phone_number.updated,

phone_number.quality_changed,

connection.connected,

connection.attention_required,

connection.disconnected,

account.updated,

flow.published,

flow.failed,

flow.response_received,

flow.status_changed,

workflow.started,

workflow.completed,

workflow.failed,

campaign.started,

campaign.completed,

campaign.failed,

call.received,

call.ended,

call.failed,

call.permission_request,

call.recording_available,

call.transcript_available,

conversion.detected,

customer.created,

customer.updated,

customer.suspended,

customer.archived,

customer.deleted,

customer.connected,

customer.usage_alert,

setup_link.failed,

address.received,

contact.identity_changed,

group.created,

group.updated,

group.deleted,

group.participants_changed,

group.join_requested,

group.suspended

custom_headers

object

phone_number_restrictions

string[]

timeout_seconds

integer

max_attempts

integer

api_version

string

consecutive_failures

integer

paused_at

string<date-time> | null

Set when repeated failures auto-paused the endpoint.

created_at

string<date-time> | null

pause_reason

string | null

Why deliveries stopped. Set when LazyApp auto-paused the endpoint after repeated failures.

Messages

Contacts

Conversations

Calls

Groups

Templates

Media

Broadcasts

Events

Flows

Webhooks

Workflows

Verify

Capabilities

Catalog

Funding

Platform

Meta-compatible proxy

Connections

Billing

Analytics

Payments

Rotate a webhook signing secret

Authorizations

Headers

Path Parameters

Response