BackendHTTP APIEnvironments

Rotate the webhook signing key

Requires an Environment API key with the environment:webhook_signing_key:rotate scope. It rotates the key of the environment the API key belongs to.

Replaces the key Tenklo uses to sign webhooks. The new key is returned once, and stays readable under Environment Settings > Webhooks > Signing key.

For up to 5 minutes after a rotation, webhooks are signed with either the old or the new key. Accept both until then.

Response example

Example Response
{
  "data": {
    "webhook_signing_key": "5f1c0d2e-6a1b-4f3c-9d8e-7b6a5c4d3e2f"
  }
}
POST
/environment/webhook-signing-key/rotate

Replace the key Nango signs its webhooks with. The previous key stops being used within 5 minutes, so verify against both during that window. Requires the environment:webhook_signing_key:rotate scope.

Authorization

bearerAuth
headerAuthorizationBearer <token>

An Environment API key from your Tenklo environment, or an Account API key for account-level endpoints.

Response Body

The new webhook signing key

application/json
  1. response
data*
Example Request
curl -X POST 'https://api.tenklo.dev/environment/webhook-signing-key/rotate'
Example Response
{  "data": {    "webhook_signing_key": "string"  }}