Translation APIReference
v2.0.0

Webhooks

Rotate a signing secret and show it once

Generate a replacement signing secret, return it once, and retain the previous secret only for the configured verification grace period.

POST/webhooks/{webhookId}/rotate-secret

API key permission: webhooks:write. Send a unique Idempotency-Key and reuse it only when retrying the same request.

Parameters

NameTypeDescription
webhookIdstring · required

path parameter

Idempotency-Keystring · required

Unique operation key. Reuse it only with the same method, path, and request body.

Standard response headers

HeaderExampleDescription
Stepes-Request-Idb09de4aa-3874-4991-b85c-0bc86e780511

Server-generated request identifier for support and audit correlation.

Stepes-API-Version2.0.0

Effective Stepes API semantic version.

RateLimit-Policy120;w=60

Effective request limit and window for the authenticated key.

RateLimitlimit=120, remaining=119, reset=60

Current limit, remaining requests, and reset interval.

Idempotency-Replayedtrue

Present with value true when a stored mutation response is replayed.

Responses

200

Replacement secret

404

Resource was not found or is not available to this API key

{
  "id": "string",
  "object": "webhook_endpoint",
  "url": "https://example.com/resource",
  "name": "string",
  "events": [
    "quote.created"
  ],
  "status": "active",
  "created_at": "2026-07-23T12:00:00Z",
  "updated_at": "2026-07-23T12:00:00Z",
  "secret": "string"
}