# Rotate Webhook Secret

`POST https://api.vultrinference.com/v1/webhooks/secret/rotate`

Replaces the secret. The previous one keeps signing beside it for 24 hours (`previous_secret_valid_until`).

## Responses

- `200`: OK (webhook-secret-payload)
- `401`: The API key is missing, unknown or not active. Send it as Authorization: Bearer <key>. (error-payload)

## Example

```bash
curl -X POST https://api.vultrinference.com/v1/webhooks/secret/rotate \
  -H "Authorization: Bearer $VULTR_INFERENCE_API_KEY"
```

```python
import os
import requests

response = requests.post(
    "https://api.vultrinference.com/v1/webhooks/secret/rotate",
    headers={"Authorization": f"Bearer {os.environ['VULTR_INFERENCE_API_KEY']}"},
)
print(response.json())
```

```javascript
const response = await fetch("https://api.vultrinference.com/v1/webhooks/secret/rotate", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VULTR_INFERENCE_API_KEY}`,
  },
});
console.log(await response.json());
```