Webhooks
Rotate webhook secret
Invalidates the previous secret and reveals the new one only once.
POST
/webhooks/{id}/rotate-secretwebhooks:writeBEHAVIOR
The change is validated and persisted in the key account before responding. Query the returned resource as the source of truth.
EFFECT
It can change the resource and emit the corresponding domain event.
REPETITION
On network failure, confirm the resource status before retrying. Automatically redo only 429 and 5xx with backoff and jitter.
Request
idstring · pathResource identifier.minLength 2 · maxLength 100mandatoryAuthorization
Bearer ach_live_...Accept
application/jsonScope
webhooks:writeExecutable example
curl
curl -X POST 'https://achadu.com/api/v1/webhooks/resource_id/rotate-secret' \
-H 'Authorization: Bearer ach_live_...' \
-H 'Accept: application/json'Response and errors
Every response includes request_id. Lists add pagination; mutable resources return the persisted state after the operation.
200 application/json
{
"data": {
"id": "wh_01J...",
"name": "Production",
"url": "https://example.com/webhooks/achadu",
"events": [
"offer.created"
],
"active": true,
"created_at": "2026-08-31T18:20:00.000Z"
},
"request_id": "req_01J..."
}200Operation completed.400Invalid parameter, body or transition.401Missing, invalid, expired or revoked key.402The account plan does not release this interface.403A chave precisa do escopo webhooks:write.404Feature does not exist in this account.409The current state prevents this operation.413The JSON body exceeds 128 KB.429The 120 requests per minute window has been exceeded.