Provision or rotate a signing secret
EMPTY BODY required: do not send {}. Also rotates an existing secret; ask for explicit approval before rotation. Not idempotent. Previous secret has a five-minute grace period; overlapping rotation returns 409 signing_secret_rotation_in_progress. Does not disable an already active endpoint or clear verified_at. Inspect state after a lost response.
EMPTY BODY required: do not send {}. Also rotates an existing secret; ask for explicit approval before rotation. Not idempotent. Previous secret has a five-minute grace period; overlapping rotation returns 409 signing_secret_rotation_in_progress. Does not disable an already active endpoint or clear verified_at. Inspect state after a lost response.
projectAPIKeyAuthorizationBearer <ch_dev_ or ch_live_ project API key>Read CASCADEHOOK_API_KEY from the local environment. Never print keys or headers. Scope is the project selected when the key was created.
endpoint_id*stringuuidOne-time secret. Capture directly to the receiver environment; never print this response.
application/json- response
endpoint_id*stringuuidsigning_secret*stringOne-time credential. Capture directly to the receiver environment; never print or log it.
^whsec_[A-Za-z0-9+/]{43}=$updated_at*stringdate-timeprevious_secret_expires_at*|date-timecurl -X POST 'https://api.cascadehook.com/v1/endpoints/497f6eca-6276-4993-bfeb-53cbbbba6f08/signing-secret'{ "endpoint_id": "e9ce0d4f-d433-423d-9497-4c000544106c", "signing_secret": "string", "updated_at": "2019-08-24T14:15:22Z", "previous_secret_expires_at": "2019-08-24T14:15:22Z"}List endpoints GET
Returns newest-first retained data. Unknown or repeated query parameters are rejected. Follow next_cursor until null; preserve filters. Omit cursor on the first page.
Update endpoint configuration or enabled state PATCH
URL changes clear verification and disable delivery. Enabling requires verification and a signing secret. Replacing subscriptions changes future fan-out. Ask before modifying existing receiver configuration.