Tone docs
API referenceWebhooks

This endpoint's signing secret

Each endpoint has its own, so rotating one does not disturb the others.

Requires the admin scope. A key with less gets 403 insufficient_scope.

GET
/v1/integrations/webhooks/{id}/secret
AuthorizationBearer <token>

Authorization: Bearer tone_live_… or tone_test_…. The prefix IS the environment: a test key reaches only the sandbox, and no request field bridges the two.

In: header

Path Parameters

id*string

The webhook endpoint's id.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/integrations/webhooks/string/secret"
{  "data": {    "note": "Signs every delivery to this endpoint as x-tone-signature.",    "secret": "whsec_3f1a7f6e2b4c4d1e9a8b5c6d7e8f9a0b"  }}
Was this page helpful?