> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.cloudraker.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.cloudraker.com/_mcp/server. # Rotate a webhook channel's signing secret POST https://api.cloudraker.com/channels/{id}/rotate-secret Content-Type: application/json Sets (first time) or rotates the Standard Webhooks secret a webhook channel verifies inbound deliveries against. The outgoing secret keeps verifying for one rotation cycle. The secret is never returned in any response — only an opaque Vault reference. Authorization: organization administrators only. Returns 400 if the channel is not a webhook channel, 404 if not found. Reference: https://docs.cloudraker.com/api/cloud-raker-api/workspace/channels/rotate-channel-secret ## OpenAPI Specification ```yaml openapi: 3.1.0 info: title: CloudRaker API version: 1.0.0 paths: /channels/{id}/rotate-secret: post: operationId: rotate-channel-secret summary: Rotate a webhook channel's signing secret description: >- Sets (first time) or rotates the Standard Webhooks secret a webhook channel verifies inbound deliveries against. The outgoing secret keeps verifying for one rotation cycle. The secret is never returned in any response — only an opaque Vault reference. Authorization: organization administrators only. Returns 400 if the channel is not a webhook channel, 404 if not found. tags: - channels parameters: - name: id in: path required: true schema: type: string - name: Authorization in: header description: Bearer authentication required: true schema: type: string responses: '200': description: The channel, with its secret rotated. content: application/json: schema: $ref: '#/components/schemas/ChannelResponse' requestBody: content: application/json: schema: type: object properties: secret: type: string description: '`whsec_`-prefixed base64.' required: - secret servers: - url: https://api.cloudraker.com description: Production - url: https://api.staging.raker.one description: Staging - url: https://api.dev.raker.one description: Development components: schemas: ChannelType: type: string enum: - email - webhook - file_drop title: ChannelType ChannelStatus: type: string enum: - active - archived title: ChannelStatus Channel: type: object properties: _id: type: string slug: type: string name: type: string type: $ref: '#/components/schemas/ChannelType' address: type: string webhookSecretVaultId: type: - string - 'null' folderId: type: - string - 'null' status: $ref: '#/components/schemas/ChannelStatus' createdAt: type: string archivedAt: type: - string - 'null' createdBy: type: string required: - _id - slug - name - type - address - webhookSecretVaultId - status - createdAt - archivedAt - createdBy title: Channel ChannelResponse: type: object properties: channel: $ref: '#/components/schemas/Channel' required: - channel title: ChannelResponse securitySchemes: bearerAuth: type: http scheme: bearer ``` ## Examples **Request** ```json { "secret": "whsec_dGhpc2lzYXNlY3JldGtleQ==" } ``` **Response** ```json { "channel": { "_id": "ch_9f8b7c6d5e4a3b2c1d0e", "slug": "order-webhook", "name": "Order Webhook Channel", "type": "webhook", "address": "https://hooks.example.com/order", "webhookSecretVaultId": "vault_123abc456def", "status": "active", "createdAt": "2024-05-20T10:15:30Z", "archivedAt": "null", "createdBy": "user_42a1b2c3d4e5f6", "folderId": "folder_789xyz" } } ``` **SDK Code** ```typescript import { CloudRakerClient } from "@cloudraker/api"; async function main() { const client = new CloudRakerClient({ token: "YOUR_TOKEN_HERE", }); await client.channels.rotateChannelSecret("id", { secret: "whsec_dGhpc2lzYXNlY3JldGtleQ==", }); } main(); ``` ```python from cloudraker import CloudRaker client = CloudRaker( token="YOUR_TOKEN_HERE", ) client.channels.rotate_channel_secret( id="id", secret="whsec_dGhpc2lzYXNlY3JldGtleQ==", ) ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.cloudraker.com/channels/id/rotate-secret" payload := strings.NewReader("{\n \"secret\": \"whsec_dGhpc2lzYXNlY3JldGtleQ==\"\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.cloudraker.com/channels/id/rotate-secret") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"secret\": \"whsec_dGhpc2lzYXNlY3JldGtleQ==\"\n}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://api.cloudraker.com/channels/id/rotate-secret") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"secret\": \"whsec_dGhpc2lzYXNlY3JldGtleQ==\"\n}") .asString(); ``` ```php request('POST', 'https://api.cloudraker.com/channels/id/rotate-secret', [ 'body' => '{ "secret": "whsec_dGhpc2lzYXNlY3JldGtleQ==" }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.cloudraker.com/channels/id/rotate-secret"); var request = new RestRequest(Method.POST); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"secret\": \"whsec_dGhpc2lzYXNlY3JldGtleQ==\"\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = ["secret": "whsec_dGhpc2lzYXNlY3JldGtleQ=="] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.cloudraker.com/channels/id/rotate-secret")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```