API referenceWebhooks
Rotate the signing secret
POST
Returns the new secret ONCE. With overlapHours: 24 the old secret keeps signing a second v1 in Gauge-Signature for a day.
ApiKeyheader
AuthorizationBearer <token>An API key from Developers → API keys: Authorization: Bearer gauge_live_… (or pulse_k_live_…).
id*stringThe webhook endpoint id.
Format
uuidGauge-Version?stringA dated version. Default 2026-10-21.
Idempotency-Key*stringRequired on every POST. Retries with the same key replay the first response for 24 h.
Length
1 <= length <= 255application/json- body
overlapHours?|How long the old secret keeps signing (a second v1).
Default
24The new secret.
application/json- response
secret*stringThe new signing secret. Shown once.
previousSecretExpiresAt*|Format
date-timecurl -X POST 'https://app.gauge.chat/backend/v2/webhook-endpoints/497f6eca-6276-4993-bfeb-53cbbbba6f08/rotate-secret' \ -H 'Idempotency-Key: string' \ -H 'Content-Type: application/json' \ -d '{}'Example Response
{ "secret": "string", "previousSecretExpiresAt": "2019-08-24T14:15:22Z"}