Managing Webhook Endpoints

Create and delete webhook endpoints from the admin dashboard. Once created, the dashboard displays your signing secret (whsec_...) — store it in your secrets manager immediately.

For programmatic management, use your app API key with the App Management API. See Server API Keys if you need to create one or want the full reference on scopes, rotation, and the requireApiKey lockout flag.

Rotate the signing secret

If a secret is compromised, rotate it via the Rotate webhook signing secret endpoint or from the admin dashboard. The old secret stops working immediately.

Replay failed deliveries

Re-send all failed deliveries from the last 7 days via the Replay failed deliveries endpoint.

Pausing and updating

Pause, resume, or update webhook settings (URL, event types) from the admin dashboard.