Make a new hook signing secret; the old one keeps signing for 24 hours
Operation ID: rotateHooksSecret
Returns the new secret. For 24 hours each call carries two signatures, one per secret. 404 not_found until the hooks are first saved.
Needs an API key with the manage scope.
apiKeyAuthorizationBearer <oq_ followed by 43 letters and digits>An Outqube API key, made in the app's settings. It belongs to one app and has the scope read, trigger or manage; a higher scope includes the lower ones. A revoked or expired key is a 401.
OK
application/json- response
The hooks with their signing secret, returned on rotate.
app_id*stringThe app the hooks belong to.
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$uuidsetup_url*|Called before a run's first test; null for none.
teardown_url*|Called after a run's last test; null for none.
timeout_seconds*integerSeconds to wait for an answer: 1 to 120.
-9007199254740991 <= value <= 9007199254740991enabled*booleanWhether Outqube calls the hooks.
secret_hint*stringThe last 4 characters of the signing secret.
previous_secret_expires_at*|After a rotation, when the previous secret stops signing; else null.
created_at*stringWhen the hooks were first saved.
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$date-timeupdated_at*stringWhen the hooks last changed.
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$date-timesecret*stringThe signing secret, whsec_ + base64. Shown here and in settings.
curl -X POST 'https://app.outqube.com/api/v1/hooks/rotate-secret'{ "app_id": "9b1d2f4e-7a3c-4c58-9e0b-6f3a1d2c4b5a", "setup_url": "https://staging.acme.test/outqube/setup", "teardown_url": "https://staging.acme.test/outqube/teardown", "timeout_seconds": 30, "enabled": true, "secret_hint": "q7Wd", "previous_secret_expires_at": "2026-10-31T10:05:00.000Z", "created_at": "2026-10-25T10:05:00.000Z", "updated_at": "2026-10-25T10:05:00.000Z", "secret": "whsec_c2FtcGxlLWhvb2tzLWtleS1ub3QtYS1zZWNyZXQhISE="}