DocsAPI referenceWebhooks

Rotate the signing secret

Makes a new signing secret. For 24 hours deliveries carry a second signature made with the previous one.

POST /v1/webhook-secret/rotate

Needs an API key: Authorization: Bearer $VIDEXO_API_KEY.

Request

bash

curl -X POST "$VIDEXO_API_URL/v1/webhook-secret/rotate" \
  -H "Authorization: Bearer $VIDEXO_API_KEY"

JavaScript

const response = await fetch(`${process.env.VIDEXO_API_URL}/v1/webhook-secret/rotate`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${process.env.VIDEXO_API_KEY}` },
});
const secret = await response.json();

Response

200 JSON

{
  "secret": "whsec_C2FVsBQIhrscChlQ...",
  "created_at": "2026-11-04T09:00:00.000Z",
  "rotated_at": "2026-11-04T15:00:00.000Z",
  "previous_secret_expires_at": "2026-11-05T15:00:00.000Z"
}

Responses

Responses
Status	Body	When
200	WebhookSecret	The new signing secret.
401	Problem	authentication_failed (missing_api_key, invalid_api_key, api_key_revoked, api_key_expired)
403	Problem	permission_denied (token_scope): a client token cannot call this route
429	Problem	rate_limited, with Retry-After in seconds