Skip to main content
POST
/
webhook
/
endpoints
/
{id}
/
rotate-secret
Rotate Webhook Signing Secret
curl --request POST \
  --url https://uat-api.clinkbill.com/api/webhook/endpoints/{id}/rotate-secret \
  --header 'X-API-KEY: <api-key>' \
  --header 'X-Timestamp: <api-key>'
{
  "code": 200,
  "msg": "Success",
  "data": {
    "id": "whk_xxxxx",
    "url": "https://example.com/api/clink/webhook",
    "events": [
      "session.complete",
      "order.succeeded"
    ],
    "enabled": true,
    "signingSecret": "whsec_xxxxx",
    "maskedSigningSecret": "whsec_...abcd",
    "description": "Created through the API",
    "createdAt": 1782112780956,
    "updatedAt": 1782113780956
  }
}

Authorizations

​
X-API-KEY
string
header
required

Your secret API key obtained from the Clink dashboard (Developers section)

​
X-Timestamp
string
header
required

Current timestamp in milliseconds since Unix epoch (required for request signing)

Path Parameters

​
id
string
required

Unique identifier of the webhook endpoint.

Response

Webhook signing secret rotated successfully

Body of the response message

​
code
integer<int32>

Response status code, 200 when success

Example:

200

​
msg
string

Brief description of what happened, 'success' when happy case

Example:

"Success"

​
data
object