Skip to main content
POST
Rotate the signing secret

Authorizations

Authorization
string
header
required

API token created in the dashboard under Integrations > API. Tokens start with gci_.

Path Parameters

id
string<uuid>
required
Pattern: [a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}

Response

The endpoint with its new secret.

An HTTPS endpoint that receives signed order events.

createdAt
string<date-time>
Example:

"2026-09-25T13:05:00.000Z"

enabled
boolean

Disabled endpoints receive nothing, including test deliveries.

events
string[]

Subscribed events.

Example:
id
string<uuid>
Pattern: [a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}
Example:

"0f8fad5b-d9cb-469f-a165-70867728950e"

name
string
Example:

"ERP"

secret
string

Signing secret. Returned only on create and on secret rotation; store it now.

Example:

"gcwhsec_7vJt0mX2..."

secretFingerprint
string

Last characters of the signing secret, to tell secrets apart.

Example:

"******Xy12ab"

updatedAt
string<date-time>
Example:

"2026-09-25T13:05:00.000Z"

url
string
Example:

"https://erp.example.com/gamecart"