Rotate the signing secret

curl -X POST https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/roll_secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

POST

api

webhook_endpoints

{id}

roll_secret

curl -X POST https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/roll_secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

string

required

The endpoint id.

curl -X POST https://api.agentcard.sh/api/v2/webhook_endpoints/we_7h2k9p4m/roll_secret \
  -H "Authorization: Bearer $ORG_TOKEN"

{ "id": "we_7h2k9p4m", "secret": "whsec_…" }

Update your verifier before events start arriving signed with the new secret.