Rotate a webhook's signing secret

Give one of your webhook channels a new signing secret; the old one keeps signing for 24 hours.

POST https://data.vike.io/v1/alerts/channels/{channel_id}/rotate-secret

Gives one of your webhook channels a new generated signing secret, returned once as secret (and shown again on Account → Alerts → channels, Show secret), with Cache-Control: no-store. The old secret keeps signing for 24 hours, until previous_secret_valid_until: meanwhile each delivery carries two sig= values in X-Vike-Signature, the new secret's first, and a receiver must accept it when any of them matches. A channel that never had a secret rotates with no overlap (previous_secret_valid_until is null). 404 for a channel that is not yours, not a webhook or does not exist. The same as the MCP tool alerts_rotate_webhook_secret.

channel_idpathrequired

The webhook channel's id (from GET /v1/alerts/channels).

cURL

# install the new secret on the receiver, then send the test event again
curl -X POST -H "X-API-Key: $VIKE_API_KEY" \
  "https://data.vike.io/v1/alerts/channels/12/rotate-secret"