SET Direct Deposit API · Events & webhooks
Rotate the webhook signing secret
POST/api/partner/webhook_secret/rotate
A new signing secret for your first endpoint (version + 1), returned once. For 24 hours every delivery carries a second v1 signature under the previous secret, SET-Signature: t=…,v1=<new>,v1=<previous>: accept either while you deploy the new one. One rotation a day. Needs a key that can write.
Headers
Idempotency-Keystring- Optional. The same key and body run once; a replay answers with
Idempotent-Replayed: true. Kept 24 hours.
Errors
409 rotation_in_progress403 scope_missing503 webhooks_unconfigured401 partner_key_required401 partner_key_invalid401 api_key_expired403 scope_missing403 ip_not_allowed403 merchant_no_direct_deposit429 rate_limited503 direct_deposit_disabled