Skip to main content
POST
Rotate a destination signing secret

Authorizations

hookie_session
string
cookie
required

The console's sealed session cookie, set by WorkOS AuthKit. Mutating requests also require the X-Requested-With CSRF header.

Path Parameters

pid
string
required

Project id (UUID) belonging to the caller workspace.

id
string
required

Destination id.

Response

Rotated, returning the new plaintext secret (status 200, not 201). Sent with Cache-Control: no-store and audited as rotate_destination_secret. Rotation takes effect on the very next delivery, so the receiver must be updated first. No request body is read.

signing_secret
string
required

whsec_ followed by 48 hex characters.