Rotate the webhook signing key
Requires an Environment API key with the environment:webhook_signing_key:rotate scope. It rotates the key of the environment the API key belongs to.
Replaces the key Tenklo uses to sign webhooks. The new key is returned once, and stays readable under Environment Settings > Webhooks > Signing key.
For up to 5 minutes after a rotation, webhooks are signed with either the old or the new key. Accept both until then.
Response example
{
"data": {
"webhook_signing_key": "5f1c0d2e-6a1b-4f3c-9d8e-7b6a5c4d3e2f"
}
}Replace the key Nango signs its webhooks with. The previous key stops being used within 5 minutes,
so verify against both during that window. Requires the environment:webhook_signing_key:rotate scope.
bearerAuthAuthorizationBearer <token>An Environment API key from your Tenklo environment, or an Account API key for account-level endpoints.
The new webhook signing key
application/json- response
data*curl -X POST 'https://api.tenklo.dev/environment/webhook-signing-key/rotate'{ "data": { "webhook_signing_key": "string" }}