Skip to content
nsin docs
EN فا

Generate a new webhook signing secret

POST
/uptime/webhook/rotate-secret
 
curl --request POST \
  --url 'https://api.nsin.ir/uptime/webhook/rotate-secret?domain=example.com' \
  --header 'Authorization: Bearer <token>'

Replaces the domain’s webhook signing secret with a new random whsec_… value and returns it. Deliveries are signed with the new secret from the next one on, so the old secret stops verifying at once — update your receiver first. Requires domain.settings.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Query Parameters

Section titled “Query Parameters ”
domain
required
string

The domain name (for example example.com). These endpoints take the domain as a query parameter rather than a path segment.

Example 
example.com

Responses

Section titled “ Responses ”

200

Section titled “200 ”

The webhook, with its new secret.

Media type application/json
object
enabled
boolean
url

Empty when no webhook is configured.

string
secret

The HMAC signing secret, whsec_…. Empty until a URL has been saved.

string
Example generated
{
  "enabled": true,
  "url": "example",
  "secret": "example"
}

400

Section titled “400 ”

The domain query parameter is missing.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example missing 
{
  "error": "domain is required"
}

401

Section titled “401 ”

Missing, malformed, revoked or expired API key. (A valid key whose account has been deactivated gets 403 account is inactive instead.)

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example invalidKey 
{
  "error": "invalid API key"
}

403

Section titled “403 ”

The key is read-only, your role on the domain lacks the required permission, or the domain’s plan does not include the feature.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Example 
{
  "error": "read-only API key"
}

404

Section titled “404 ”

No such domain, or it is not visible to this account. Domains you cannot access are reported as not found rather than forbidden.

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Example 
{
  "error": "read-only API key"
}

429

Section titled “429 ”

The key exceeded its request budget (300 requests per minute by default).

Media type application/json

The single error shape used by every endpoint.

object
error
required

Human-readable description of what went wrong.

string
Examples
Example limited 
{
  "error": "rate limit exceeded"
}