Skip to main content
POST
Rotate Partner Webhook

Authorizations

Authorization
string
header
required

Get token from Auth0 and paste it here

Path Parameters

category
enum<string>
required

Category of partner webhook.

Available options:
payroll_status

Body

application/json

Body accepted on the rotate (POST) request.

Only the grace window is accepted; the current secret is NOT required — the endpoint is gated by the write:partner_webhooks scope. The outgoing key(s) stay valid for grace_seconds so the partner can switch over without dropping deliveries.

grace_seconds
integer
default:86400

How long the previous key(s) stay valid after rotation

Required range: 0 <= x <= 604800

Response

Successful Response

Response for setup (first PUT) and rotate: the generated secret is shown once.

secret is null on a repeat PUT that only updates url/enabled without minting a new key.

partner_id
string
required

Auth0 client_id of the partner

category
enum<string>
required

Event category, e.g. payroll_status

Available options:
payroll_status
enabled
boolean
required

Whether deliveries are sent for this webhook

url
string<uri>
required

HTTPS endpoint we POST events to

Required string length: 1 - 2083
secret
string | null

Signing secret — shown once, store it now