Rotate the signing secret

Creates a new signing secret and shows it only in this response. The old secret stops working at once: deliveries right after the rotation are signed with the new secret.

POST/v1/webhooks/{groupId}/rotate-secret

POSTRotate the signing secret

curl -X POST "https://api.darkradar.com/api/public/v1/webhooks/64b1f0c2a9e4d21f8c3b9a10/rotate-secret" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Response

Success

{
  "success": true,
  "message": "OK",
  "data": {
    "signingSecret": "whsec_Vb2q…"
  }
}

Access

Scopewebhooks:write

Plan entitlementapi_access

Path parameters

Fields	Values
`groupId` · string · required	Protection resource group id (24 hex chars) · Example: `64b1f0c2a9e4d21f8c3b9a10`

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429Rate limit exceeded; retry after a minute

Response limits

Rate limit500 requests per 15 min · per IP