> ## Documentation Index
> Fetch the complete documentation index at: https://dialnexa.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate Webhook Secret

> Rotate the webhook signing secret for an organization.

<Warning>
  **Legacy endpoint - deprecated.** Unversioned endpoints are scheduled for removal on **July 31, 2026**. A public v1 replacement is not currently listed in the v1 reference. This endpoint remains available for existing integrations until then.
</Warning>

Rotates the active webhook signing secret. After rotation, update every webhook receiver that validates `x-dialnexa-signature`.

## Related endpoints

* [Get Webhook Secret](/docs/api-reference/webhook-secrets/get): fetch the active secret metadata.
* [Update Webhook Secret](/docs/api-reference/webhook-secrets/update): rename a secret.


## OpenAPI

````yaml POST /external-webhooks/secret/rotate
openapi: 3.0.0
info:
  title: DialNexa API
  description: >-
    Public REST API for the DialNexa voice AI platform. Versioned endpoints are
    under /v1; unversioned endpoints are legacy and deprecated.
  version: 1.0.0
servers:
  - url: https://api.dialnexa.com
    description: DialNexa production API
security:
  - bearer: []
tags:
  - name: API Keys
  - name: Agent Functions
  - name: Agents V1
  - name: Agents2
  - name: Batch Calls
  - name: Batch Calls V1
  - name: Call Logs
  - name: Calls
  - name: Calls V1
  - name: Campaign Leads
  - name: Campaigns
  - name: External Webhooks
  - name: Knowledge Base
  - name: Knowledge Base V1
  - name: LLMs
  - name: LLMs V1
  - name: Languages
  - name: Languages V1
  - name: Organization Phone Numbers
  - name: Organization Phone Numbers V1
  - name: Phone Number Pricing
  - name: Phone Number Pricing V1
  - name: Transcribers
  - name: Transcribers V1
  - name: User Webhooks
  - name: User Webhooks V1
  - name: V1
  - name: Voices
  - name: Voices V1
  - name: Webcall
  - name: Workflow Leads
  - name: Workflow Leads V1
  - name: Workflows
  - name: Workflows V1
paths:
  /external-webhooks/secret/rotate:
    post:
      tags:
        - External Webhooks
      summary: Rotate the webhook secret for an organization
      description: >-
        **Legacy endpoint - deprecated, scheduled for removal on July 31,
        2026.** Use the `/v1` version for new integrations. 
      operationId: WebhookSecretsController_rotateSecret
      parameters:
        - name: x-organization-id
          in: header
          description: RSA encrypted organization ID (base64 format)
          required: true
          schema:
            type: string
            example: BASE64_ENCRYPTED_ORG_ID_HERE
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RotateWebhookSecretDto'
      responses:
        '201':
          description: The secret has been successfully rotated.
        '400':
          description: Invalid input data.
        '401':
          description: Unauthorized.
      deprecated: true
components:
  schemas:
    RotateWebhookSecretDto:
      type: object
      properties:
        name:
          type: string
          description: Optional name for the new webhook secret
          example: Production Secret
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      type: http

````