Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <token>, where <token> is one of:

  • a Bifrost management API key,
  • a dashboard session token issued by POST /api/session/login,
  • base64 of <admin-username>:<admin-password> (legacy equivalent of BasicAuth).

Virtual keys (sk-bf-*) and the x-api-key header are not accepted on management APIs - the sole exception is GET /api/governance/virtual-keys/quota, which is virtual-key-only.

Path Parameters

id
string
required

The webhook endpoint id.

Response

Secret rotated; new signing secret returned once.

Returned once when an endpoint is created or its secret is rotated. The secret is shown a single time and cannot be retrieved again.

endpoint
object

A registered webhook endpoint. The signing secret is never included in this representation; custom header values are redacted.

secret
string

The signing secret in whsec_ format. Store it now; it is never returned again.