API ReferenceWebhooks
Rotate the signing secret
POST /rest/v1/webhook_endpoints/{id}/rotate_secret
Returns a new secret; the previous one keeps validating for 24 hours (deliveries carry both as multiple v1= entries during the window).
Authorization
apiKey AuthorizationBearer <token>
Authorization: Bearer nbl_live_... (or nbl_test_... for test mode). Test-mode writes are validated and simulated but never persisted and never touch channels; simulated results are marked simulated.
In: header
Path Parameters
id*string
Response Body
application/json
application/json
curl -X POST "https://example.com/webhook_endpoints/string/rotate_secret"{ "id": "whe_4b8s1", "object": "webhook_endpoint", "url": "http://example.com", "events": [ "order.created" ], "status": "enabled", "created_at": "2019-08-24T14:15:22Z", "secret": "string"}Last updated on July 28, 2026
Need help?
The API is in private beta — email us and a human replies, usually within one business day.