API Reference›Servicing Plane›Webhooks›Rotate a webhook signing secret

Rotate a webhook signing secret

POSThttps://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/{webhookSubscriptionId}/rotate-secretRoadmapBearer token ·MANAGE_WEBHOOK

Creates a new signing secret with a bounded overlap window and returns the new value once.

Roadmap contract. This operation is published product direction and is not registered by the current servicing runtime. Check API availability before building an integration.

Request

curl -X POST https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/$WEBHOOK_SUBSCRIPTION_ID/rotate-secret \
  -H "Authorization: Bearer $TOKEN" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "overlapSeconds": 3600,
  "expectedVersion": 3
}'

await fetch(`https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/${webhookSubscriptionId}/rotate-secret`, {
  method: "POST",
  headers: { Authorization: `Bearer ${token}`, "Idempotency-Key": idempotencyKey, "Content-Type": "application/json" },
  body: JSON.stringify({
  "overlapSeconds": 3600,
  "expectedVersion": 3
}),
});

requests.post(
  f"https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/{webhook_subscription_id}/rotate-secret",
  headers={"Authorization": f"Bearer {token}", "Idempotency-Key": idempotency_key},
  json={
  "overlapSeconds": 3600,
  "expectedVersion": 3
},
)

{
  "webhookSubscriptionId": "whsub_PORTFOLIO_7",
  "signingSecret": "whsec_sandbox_once_9M4Q",
  "secretVersion": 3,
  "previousSecretExpiresAt": "2026-09-20T11: 00:00Z",
  "version": 4
}

{
  "type": "https://docs.lendeasy.ai/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/version_conflict",
  "title": "Version Conflict",
  "status": 409,
  "code": "version_conflict",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/validation_error",
  "title": "Validation Error",
  "status": 422,
  "code": "validation_error",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/rate_limited",
  "title": "Rate Limited",
  "status": 429,
  "code": "rate_limited",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

Path & query parameters

Field	Type	Description
webhookSubscriptionId required in path	string	Stable opaque webhookSubscription identifier.
Idempotency-Key required in header	string	Stable key for this one logical mutation. Reuse it for retries; reusing it with a different request returns 409.

Body parameters

Field	Type	Description
overlapSeconds required	integer
expectedVersion required	integer

Request

curl -X POST https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/$WEBHOOK_SUBSCRIPTION_ID/rotate-secret \
  -H "Authorization: Bearer $TOKEN" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "overlapSeconds": 3600,
  "expectedVersion": 3
}'

await fetch(`https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/${webhookSubscriptionId}/rotate-secret`, {
  method: "POST",
  headers: { Authorization: `Bearer ${token}`, "Idempotency-Key": idempotencyKey, "Content-Type": "application/json" },
  body: JSON.stringify({
  "overlapSeconds": 3600,
  "expectedVersion": 3
}),
});

requests.post(
  f"https://sandbox.api.lendeasy.ai/v1/servicing/webhook-subscriptions/{webhook_subscription_id}/rotate-secret",
  headers={"Authorization": f"Bearer {token}", "Idempotency-Key": idempotency_key},
  json={
  "overlapSeconds": 3600,
  "expectedVersion": 3
},
)

{
  "webhookSubscriptionId": "whsub_PORTFOLIO_7",
  "signingSecret": "whsec_sandbox_once_9M4Q",
  "secretVersion": 3,
  "previousSecretExpiresAt": "2026-09-20T11: 00:00Z",
  "version": 4
}

{
  "type": "https://docs.lendeasy.ai/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "code": "unauthorized",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "code": "forbidden",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/version_conflict",
  "title": "Version Conflict",
  "status": 409,
  "code": "version_conflict",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/validation_error",
  "title": "Validation Error",
  "status": 422,
  "code": "validation_error",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}

{
  "type": "https://docs.lendeasy.ai/errors/rate_limited",
  "title": "Rate Limited",
  "status": 429,
  "code": "rate_limited",
  "detail": "The request could not be applied.",
  "requestId": "req_01J2R8M6YQ3C7K2N"
}