> ## Documentation Index
> Fetch the complete documentation index at: https://docs.photon.codes/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use Stable documentation by default. Honor an explicit Beta request or a URL under /docs/beta/. If the requested version conflicts with the installed CLI package or API origin, clarify the target before writing integration code.
> Pages under /docs/beta/ document Beta; other product pages document Stable. Keep the CLI package, commands, API origin, and credentials within the selected version. State the documentation version in your answer.
> For MCP search, always pass version: Stable or version: Beta. Unfiltered search mixes both versions. For filesystem reads, keep Beta queries under /beta/ and exclude /beta/ from Stable queries; discover paths before reading them.
> The public docs base is https://photon.codes/docs. Convert MCP page paths to public URLs under that base, preserving /beta/ when present. Read https://photon.codes/docs/skill.md for version selection and https://photon.codes/docs/llms.txt for the version indexes.

# Rotate webhook signing secret

> Rotate webhook signing secret: rotateWebhookSigningSecret in the TypeScript, Python and Rust clients.

`POST /v1/projects/{projectId}/webhooks/destinations/{destinationId}/secret-rotations`

Rotates the signing secret for the selected project's webhook destination and returns the new secret. The optional overlapSeconds controls the requested overlap with the previous secret according to the documented request constraints. Store the new secret securely and update the receiver's signature verification configuration; it is returned only in this response and in idempotent replays of it, never by destination reads. Supply the required Idempotency-Key header.

<Tabs>
  <Tab title="TypeScript">
    ```typescript TypeScript theme={null}
    photon.projects.rotateWebhookSigningSecret(input: RotateWebhookSigningSecretInput, options?: RequestOptions): Promise<RotateWebhookSigningSecretOutput>
    ```
  </Tab>

  <Tab title="Python">
    ```python Python theme={null}
    photon.projects.rotate_webhook_signing_secret(input: RotateWebhookSigningSecretInput) -> models.RotateWebhookSigningSecretResponse
    ```
  </Tab>

  <Tab title="Rust">
    ```rust Rust theme={null}
    client.rotate_webhook_signing_secret(idempotency_key: String, destination_id: String, project_id: String, body: &types::RotateWebhookSigningSecretRequest).await -> Result<ResponseValue<types::RotateWebhookSigningSecretResponse>, Error<RotateWebhookSigningSecretError>>
    ```
  </Tab>
</Tabs>

<RequestExample>
  ```typescript TypeScript theme={null}
  import { Photon } from "@photon-ai/api";

  const photon = new Photon({
    headers: { Authorization: `Bearer ${process.env.PHOTON_API_TOKEN}` },
  });
  const result = await photon.projects.rotateWebhookSigningSecret({
    path: {
      destinationId: "destinationId",
      projectId: "projectId",
    },
    headers: {
      idempotencyKey: "idempotencyKey",
    },
    body: {},
  });
  ```

  ```python Python theme={null}
  import os

  from photon_api import Photon
  from photon_api.rpc_generated import RotateWebhookSigningSecretInput

  photon = Photon(headers={"Authorization": f"Bearer {os.environ['PHOTON_API_TOKEN']}"})
  result = photon.projects.rotate_webhook_signing_secret(
      RotateWebhookSigningSecretInput.model_validate({
          "path": {
              "destinationId": "destinationId",
              "projectId": "projectId",
          },
          "headers": {
              "Idempotency-Key": "idempotencyKey",
          },
          "body": {},
      })
  )
  ```

  ```rust Rust theme={null}
  use photon_ai_api::{Credential, PhotonClientBuilder, SecretString};

  let token = std::env::var("PHOTON_API_TOKEN")?;
  let client = PhotonClientBuilder::new()
      .credential("accountServiceKey", Credential::Bearer(SecretString::from(token)))
      .build()?;
  let result = client
      .rotate_webhook_signing_secret(
          "idempotencyKey".to_owned(),
          "destinationId".to_owned(),
          "projectId".to_owned(),
          &serde_json::from_value(serde_json::json!({}))?,
      )
      .await
      .map_err(|error| format!("{error:?}"))?
      .into_inner();
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "previousSecretExpiresAt": null,
    "signingSecret": "string"
  }
  ```
</ResponseExample>

## Parameters

<ParamField header="Idempotency-Key" type={"string"} required>
  Identifies one logical mutation across retries.
</ParamField>

<ParamField path="destinationId" type={"string"} required />

<ParamField path="projectId" type={"string"} required />

## Body

<ParamField body="overlapSeconds" type={"integer"} />

## Returns

**`200`** The new signing secret. RotateWebhookSigningSecretResponse

<ResponseField name="previousSecretExpiresAt" type={"string (date-time) | null"} required />

<ResponseField name="signingSecret" type={"string"} required />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.