Rotate signing secret
POST
https://api.casafari.com/alerts-api/webhooks/rotate-secretBearer token1 parameter
Send Authorization: Bearer $CASAFARI_TOKEN; see how to get a token.
Over MCP: no tool does this. MCP and REST compared.
Description
Issues a new current signing secret. By default the previous secrets stay valid for a 24-hour grace window so you can install the new key before removing the old one. Pass {"immediate": true} to revoke all previous secrets right away — use this only when a secret is compromised.
Request body
Content type application/json. Required. Type: object.
immediatebooleanWhen false (default), the previous secrets keep working for a 24-hour grace window so you can switch the new secret before the old one stops signing; deliveries carry a signature for each active secret meanwhile. When true, the previous secrets are revoked immediately and only the new one signs — use this only when a secret is compromised.
default false
Example request
Placeholders only: replace the token and the values with your own.
curl -X POST "https://api.casafari.com/alerts-api/webhooks/rotate-secret" \
-H "Authorization: Bearer $CASAFARI_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"immediate": false
}'Responses
200 Successful Response
Type: object.
Show the response shape (1 fields)
secretstringrequired422 Validation Error
Type: object.
Show the response shape (6 fields)
detailobject[]5 properties
loc(string | integer)[]requiredmsgstringrequiredtypestringrequiredinputanyctxobject