---
title: "Managing Webhook Endpoints"
description: "Create and manage webhook endpoints from the admin dashboard"
---

> **For AI agents:** the complete documentation index is at [llms.txt](/llms.txt). Append `.md` to any page URL for its markdown version.

Create and delete webhook endpoints from the **admin dashboard**. Once created, the dashboard
displays your signing secret (`whsec_...`) — store it in your secrets manager immediately.

For programmatic management, use your app API key with the
[App Management API](/api-reference/app-management/rotate-webhook-signing-secret). See
[Server API Keys](/recipes/server-api-keys) if you need to create one or
want the full reference on scopes, rotation, and the `requireApiKey`
lockout flag.

## Rotate the signing secret

If a secret is compromised, rotate it via the
[Rotate webhook signing secret](/api-reference/app-management/rotate-webhook-signing-secret)
endpoint or from the admin dashboard. The old secret stops working immediately.

<Warning>
  Store the new secret immediately. You cannot retrieve it later.
</Warning>

## Replay failed deliveries

Re-send all failed deliveries from the last 7 days via the
[Replay failed deliveries](/api-reference/app-management/replay-failed-deliveries) endpoint.

## Pausing and updating

Pause, resume, or update webhook settings (URL, event types) from the admin dashboard.