Create or rotate webhook signing secret
Generates (or rotates) the custom channel’s webhook signing secret used to authenticate order pushes to the ingest URL. The secret is returned only once. Rotating invalidates the previous secret immediately.
Authorizations
JWT access token or API token (prefixed with zipp_)
Path Parameters
Organization ID.
"clz9k2f0a0000abcd0000zzzz"
Order channel ID.
"clz9k2f0a0001abcd1234efgh"
Response
Default Response
The webhook signing secret. Returned only once — store it in your system; every push to the ingest URL must carry an HMAC-SHA256 hex signature of the raw body computed with it.
"zwhs_XeVJ1n8vJZbJ0N3mYQ2fV0dK9cA5tR7uW4pL6sH8gB0"
The ingest URL your system pushes signed order events to.
"https://api.zippendo.com/webhooks/order-channels/clz9k2f0a0001abcd1234efgh"
When this secret was issued (ISO 8601).
^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$"2026-09-02T14:30:00.000Z"