Mint a new webhook signing secret
Generate a new signing secret for webhook deliveries on the authenticated account.
Generate a new signing secret for webhook deliveries on the authenticated account.
Every webhook this API sends is signed with this secret so your receiver can verify the payload actually came from us. Rotating takes effect immediately — deliveries in flight are signed with the old secret, so accept both for a short window when rotating a live receiver.
The secret is returned once, in this response. Unmetered.
Authorization
BearerAuth Your API key, sent as Authorization: Bearer wm_.... Keys are wm_ followed by 40 hex characters. Create one with POST /register (free, no auth) or POST /keys.
In: header
Response Body
application/json
application/json
application/json
application/json
curl -X POST "https://api.wellmarked.io/webhook/rotate" \ -H "Authorization: Bearer wm_your_api_key_here"{ "rotated_at": "2019-08-24T14:15:22Z", "webhook_signing_secret": "string"}Revoke an API key (stops working immediately)
Revoke a key on the authenticated account. The key stops authenticating immediately — there is no grace period, so revoke only after the replacement is deployed.
Your request history (audit log)
Return the authenticated account's recent API requests — URL, endpoint, status, latency and which key made the call.