Mint a new secret for one webhook url
POST/api/flows/:flowId/webhooks/:token/rotate
The url does not change. Rotating because a secret leaked must not also mean finding everyone who calls it and giving them a new address. Showing and rotating are separate acts on purpose — conflating them is how somebody breaks a live integration by pressing "show".
Request
Responses
- 200
- 401
- 403
- 404
The new secret, shown once.
Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).
Authenticated but not allowed.
Resource not found (or not visible to the current tenant).