SETSimple Easy Transactions
SET DocsAPI reference and complianceUpdated 2026-11-09
Browse: SET Merchant API

SET Merchant API · Events & webhooks

Rotate the webhook signing secret

POST/v1/webhook_endpoint/rotate_secret

Key scope: write

A new signing secret (version + 1), returned once. For 24 hours every delivery carries a second v1 signature under the previous secret, SET-Signature: t=…,v1=<new>,v1=<previous>: accept either while you deploy the new one. One rotation a day.

Headers

Idempotency-Key string
Optional. The same key and body run once; a replay answers with Idempotent-Replayed: true. Kept 24 hours.

Errors

  • 409 rotation_in_progress
  • 403 operator_cannot_rotate
  • 503 webhooks_unconfigured
  • 401 api_key_required
  • 401 api_key_invalid
  • 401 api_key_wrong_mode
  • 403 scope_missing
  • 429 rate_limited

All codes: Errors.