> ## Documentation Index > Fetch the complete documentation index at: https://docs-platform.crewai.com/llms.txt > Use this file to discover all available pages before exploring further. # Rotate a webhook endpoint's signing secret > Replaces the signing secret and returns the new one. Deliveries sent after this request are signed with the new secret. ## OpenAPI ````yaml /openapi/platform-v1.yaml post /api/v1/webhook-endpoints/{id}/rotate-secret openapi: 3.0.1 info: title: CrewAI Platform API version: v1 description: Supported public API for CrewAI Platform. servers: - url: https://app.crewai.com description: Current CrewAI Platform host security: - bearerAuth: [] tags: - name: Users description: Users in the organization. - name: Status description: Platform health and API availability. - name: Automations description: Automations and their source artifacts. - name: Teams description: Teams in the organization. - name: Group Mappings description: Identity-provider group mappings to Teams. - name: Service Accounts description: Service accounts in the organization. - name: Webhook Endpoints description: Endpoints that receive signed event deliveries. paths: /api/v1/webhook-endpoints/{id}/rotate-secret: parameters: - name: id in: path required: true schema: type: string format: uuid example: 4f6d0d9a-7b78-4c6a-b64f-2e2e3d2c8f9a post: tags: - Webhook Endpoints summary: Rotate a webhook endpoint's signing secret description: >- Replaces the signing secret and returns the new one. Deliveries sent after this request are signed with the new secret. operationId: rotateWebhookEndpointSecret responses: '200': description: OK content: application/json: examples: rotated: value: data: id: 4f6d0d9a-7b78-4c6a-b64f-2e2e3d2c8f9a url: https://hooks.example.com/crewai description: Tenant provisioning receiver event_types: - automation_created - automation_deployed - automation_deployment_failed active: true disabled_at: null signing_secret: >- whsec_00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff created_at: '2026-07-07T00:00:00Z' updated_at: '2026-07-07T00:00:00Z' summary: Signing secret rotated schema: type: object required: - data additionalProperties: false properties: data: type: object required: - id - url - description - event_types - active - disabled_at - signing_secret - created_at - updated_at additionalProperties: false properties: id: type: string format: uuid example: 4f6d0d9a-7b78-4c6a-b64f-2e2e3d2c8f9a url: type: string example: https://hooks.example.com/crewai format: uri description: type: string example: Tenant provisioning receiver nullable: true event_types: type: array items: type: string enum: - automation_created - automation_deployed - automation_deployment_failed - automation_redeployed minItems: 1 uniqueItems: true example: - automation_created - automation_deployed - automation_deployment_failed description: > Events to deliver to the endpoint: - `automation_created`: An Automation was created and is provisioning. - `automation_deployed`: An Automation came online for the first time. - `automation_deployment_failed`: An Automation's first deployment failed. - `automation_redeployed`: New code rolled out to an Automation that was already deployed. A restart does not count. active: type: boolean example: true disabled_at: type: string format: date-time example: null nullable: true description: >- When CrewAI stopped delivering after repeated failures. Set `active` to `true` to resume. signing_secret: type: string example: >- whsec_4f0c1d2e3b4a59687766554433221100ffeeddccbbaa99887766554433221100 description: >- Signs every delivery. Returned only when the endpoint is created and when the secret is rotated. created_at: type: string format: date-time example: '2026-07-07T00:00:00Z' updated_at: type: string format: date-time example: '2026-07-07T00:00:00Z' '401': description: Unauthorized content: application/json: examples: unauthorized: value: errors: - type: >- https://docs-platform.crewai.com/api/problems/unauthorized code: unauthorized title: Unauthorized status: 401 detail: Missing or invalid bearer token. summary: Missing or invalid bearer token schema: $ref: '#/components/schemas/ErrorEnvelope' '404': description: Not Found content: application/json: examples: not_found: value: errors: - type: >- https://docs-platform.crewai.com/api/problems/not_found code: not_found title: Not found status: 404 detail: The requested resource could not be found. summary: Webhook endpoint not found schema: $ref: '#/components/schemas/ErrorEnvelope' components: schemas: ErrorEnvelope: type: object required: - errors additionalProperties: false properties: errors: type: array minItems: 1 items: $ref: '#/components/schemas/Error' Error: type: object description: Public API error object. required: - type - code - title - status - detail additionalProperties: false properties: type: type: string format: uri enum: - https://docs-platform.crewai.com/api/problems/bad_request - https://docs-platform.crewai.com/api/problems/clipper_disabled - https://docs-platform.crewai.com/api/problems/clipper_disallowed - >- https://docs-platform.crewai.com/api/problems/clipper_feature_disabled - https://docs-platform.crewai.com/api/problems/clipper_not_found - https://docs-platform.crewai.com/api/problems/conflict - https://docs-platform.crewai.com/api/problems/forbidden - https://docs-platform.crewai.com/api/problems/internal_error - https://docs-platform.crewai.com/api/problems/not_found - https://docs-platform.crewai.com/api/problems/service_unavailable - >- https://docs-platform.crewai.com/api/problems/tool_execution_failed - https://docs-platform.crewai.com/api/problems/unauthorized - https://docs-platform.crewai.com/api/problems/validation_error example: https://docs-platform.crewai.com/api/problems/bad_request code: type: string enum: - bad_request - clipper_disabled - clipper_disallowed - clipper_feature_disabled - clipper_not_found - conflict - forbidden - internal_error - not_found - service_unavailable - tool_execution_failed - unauthorized - validation_error example: bad_request title: type: string x-crewai-enum-format: freeform enum: - Bad request - Clipper resource disabled - Clipper resource disallowed - Clipper feature disabled - Clipper resource not found - Conflict - Forbidden - Internal error - Not found - Service unavailable - Tool execution failed - Unauthorized - Validation error example: Bad request status: type: integer enum: - 400 - 401 - 403 - 404 - 409 - 422 - 500 - 503 example: 400 detail: type: string example: The request is invalid. securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: opaque ````