Read a subscription's signing secret

GET
/hooks/subscriptions/{subscriptionId}/secret

Returns a subscription's current signing secret, for recovering one you no longer have. Rotate instead if you believe it leaked, since reading it does not invalidate anything.

Authorization

apiKey
Authorization<token>

API key as Bearer token: Authorization: Bearer

In: header

Path Parameters

subscriptionId*string

ID of the webhook subscription, as returned when it was created or listed.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://terac.com/api/external/v2/hooks/subscriptions/string/secret"
{
  "secret": "string"
}
{
  "code": "BAD_REQUEST",
  "message": "Invalid input data",
  "issues": []
}

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "API key required. Include Authorization: Bearer <key> header."
  }
}

{
  "error": {
    "code": "FORBIDDEN",
    "message": "This account is not permitted to use the API."
  }
}

{
  "code": "NOT_FOUND",
  "message": "Not found",
  "issues": []
}
{
  "error": {
    "code": "RATE_LIMITED",
    "message": "Rate limit exceeded. Retry after 61 seconds."
  }
}
{
  "code": "INTERNAL_SERVER_ERROR",
  "message": "Internal server error",
  "issues": []
}

Delete a webhook subscription DELETE

Deletes a webhook subscription. Terac stops sending to it at once, including retries already queued, and its past deliveries stay readable in `GET /hooks/events`.

Rotate a subscription's signing secret POST

Replaces a subscription's signing secret and returns the new one. Takes effect immediately and with no overlap window: the next attempt of every delivery, including one already queued, is signed with the new secret, so deliveries fail your signature check until your receiver has it.