Webhooks
Rotate an endpoint signing secret
POST
/webhook-endpoints/{id}/rotate-secretScope
webhooks:writeAuth Bearer keyPath parameters
idstringrequiredResponses
200New signing secret
json
{
"id": "whe_6d21c9f0a3b7",
"object": "webhook_endpoint",
"url": "https://merchant.example.com/hooks/boundlesspay",
"description": "Production ledger sync",
"environment": "live",
"enabled_events": [
"transfer.completed",
"transfer.failed",
"deposit.settled"
],
"status": "active",
"consecutive_failures": 0,
"last_success_at": "2026-08-30T09:15:02.441Z",
"last_failure_at": null,
"last_error": null,
"created_at": "2026-07-04T11:02:19.006Z",
"signing_secret": "whsec_5b7a20d3e9114f6c8d2a91fe4c30ab77"
}Errors
Errors use RFC 9457 problem details. Branch on code, and log request_id.
400Bad request401Unauthenticated403Forbidden409Idempotency conflict422Validation error429Rate limitedcURL
curl -X POST "https://business.boundlesspay.com/api/public/v1/webhook-endpoints/{id}/rotate-secret" \
-H "Authorization: Bearer $BOUNDLESS_API_KEY"