curl -X POST https://api.60db.ai/agents/AGENT_ID/rotate-webhook-secret \
-H "Authorization: Bearer your-api-key"
const { webhook_secret } = await client.agents.rotateWebhookSecret("AGENT_ID");
result = client.agents.rotate_webhook_secret("AGENT_ID")
print(result["webhook_secret"])
Agents
Rotate Webhook Signing Secret
Issue a new signing secret for an agent’s tool and event webhooks.
POST
/
agents
/
{agentId}
/
rotate-webhook-secret
curl -X POST https://api.60db.ai/agents/AGENT_ID/rotate-webhook-secret \
-H "Authorization: Bearer your-api-key"
const { webhook_secret } = await client.agents.rotateWebhookSecret("AGENT_ID");
result = client.agents.rotate_webhook_secret("AGENT_ID")
print(result["webhook_secret"])
Issue a new signing secret for the agent’s webhooks. Every request 60db sends to your
See Tools and webhooks for verifying signatures.
tool_webhook_url and event_webhook_url is signed with it (X-60db-Signature). The new secret is returned once — store it.
The old secret stops working immediately. Update your servers right after rotating, ideally when no call is running.
Request
Headers
string
required
Bearer token with your API key (scope
agents)Path
string
required
The agent
id (UUID)Response
200 OK{
"success": true,
"data": {
"id": "6f1c1e2a-1111-4000-8000-000000000001",
"webhook_secret": "whsec_…"
}
}
Errors
| Status | Code | Meaning |
|---|---|---|
| 404 | AGENT_NOT_FOUND | No agent with this ID in your workspace |
Example
curl -X POST https://api.60db.ai/agents/AGENT_ID/rotate-webhook-secret \
-H "Authorization: Bearer your-api-key"
const { webhook_secret } = await client.agents.rotateWebhookSecret("AGENT_ID");
result = client.agents.rotate_webhook_secret("AGENT_ID")
print(result["webhook_secret"])