ResourcesWebhook Channels

Rotate the signing secret

Replace the store-wide outbound webhook signing secret without reading it back.

The signing_secret request field is write-only. Store the value securely before sending it because SellApp returns only whether a secret is configured.

PUT
/v2/webhook-channels/signing-secret

Authorization

bearerAuth storeAuth
AuthorizationBearer <token>

Provide your SellApp API key as a bearer token.

In: header

X-STORE<token>

Select the SellApp store for this API request.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

curl -X PUT "https://sell.app/api/v2/webhook-channels/signing-secret" \  -H "Content-Type: application/json" \  -d '{    "signing_secret": "replace-with-a-random-secret-at-least-32-characters-long"  }'
{
  "data": {
    "signing_secret_configured": true
  }
}
{
  "message": "Unauthenticated."
}
{
  "message": "This action is unauthorized."
}
{
  "message": "The given data was invalid.",
  "errors": {
    "data": [
      "The data field is required."
    ]
  }
}