---
title: Rotate a personal webhook signing key
description: Optional idempotency key.
---
# Rotate a personal webhook signing key

`POST https://api.releases.sh/v1/me/webhooks/{id}/rotate-secret`

Optional idempotency key. Reuse the same key only for an identical request; successful responses are replayable for 24 hours.

**Auth:** Bearer token required.

**Parameters**

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `Idempotency-Key` | header | string | no | Optional idempotency key. Reuse the same key only for an identical request; successful responses are replayable for 24 hours. |
| `id` | path | string | yes |  |

**Responses**

- `200` The new secret version and one-time signing key.
- `401` Sign-in required
- `404` Webhook subscription not found, or not owned by the caller
- `409` The key is already processing, or was reused with a different request fingerprint.
- `503` WEBHOOK_HMAC_MASTER not configured, or idempotency storage/response replay is temporarily unavailable

Full request and response schemas: [OpenAPI 3.1 spec](https://api.releases.sh/v1/openapi.json).