SUQODocs
User GuideAPI ReferenceSDKs
Webhooks

Retrieve the signing secret

Return the account's webhook signing secret, minting it on first read. Every delivery we send is signed with it; use it to verify the signature header on your endpoint. It is not rotatable through this API.

GET
/webhooks/secret/
AuthorizationBearer <token>

API key issued to the partner, sent with the Bearer prefix — for example: Authorization: Bearer sk_live_abc123.

In: header

Response Body

application/json

application/json

application/json

curl -X GET "https://example.com/webhooks/secret/"
{  "signing_secret": "whsec_3n9k2xQ7..."}