Rotate the signing secret

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/webhooks/{id}/rotate-secret \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.igrisecurity.com/api/v1/webhooks/{id}/rotate-secret', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/webhooks/{id}/rotate-secret"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

{
  "data": {
    "id": "4d5e6f70-0000-4000-8000-00000000000a",
    "name": "Security alerts",
    "type": "http",
    "url": "https://your-service.com/...****",
    "eventTypes": [
      "policy_deny",
      "anomaly"
    ],
    "enabled": true,
    "hasSecret": true,
    "secret": "whsec_9xQ...",
    "updatedAt": "2026-01-03T00:00:00Z"
  }
}

{
  "error": "Signing applies to HTTP webhooks only."
}

{
  "error": "Unauthorized"
}

{
  "error": "Forbidden",
  "required": "policies:write"
}

{
  "error": "Not found"
}