Documentation menu
self-serve
POST/v1/keys/self/webhook-secret
API key required, sent as Authorization: Bearer snk_… or ?api_key=snk_….
Call it
bash
curl -fsS -X POST "https://api.mapmap.ai/v1/keys/self/webhook-secret" \
-H "Authorization: Bearer $MAPMAP_KEY"Responses
200The new secret, shown exactly once. Calling again mints another and invalidates this one, including for deliveries already in flight
| Field | Type | Required | Description |
|---|---|---|---|
| created_at | string | yes | RFC 3339 UTC time this secret was minted. |
| key_id | string | yes | The key this secret signs for. |
| signature_header | string | yes | The header to verify: X-MapMap-Signature, the lowercase hex
HMAC-SHA256 of the raw request body under this secret. |
| webhook_secret | string | yes | The secret itself: 64 lowercase hex characters. **Shown once.** Calling again mints a new one and invalidates this. |
401Missing or invalid API key
Error bodies follow the shared problem model documented on API conventions.
Also under self-serve
Generated from https://api.mapmap.ai/openapi.json on 2026-09-17 · operationId rotate_webhook_secret