> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leapfinancial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Regenerate webhook secret

> Generates a new webhook signing secret. The new secret is returned in the response and will NOT be visible again after this call. Use it to verify webhook signatures (HMAC-SHA256).



## OpenAPI

````yaml /m2m/openapi.json post /partner/webhooks/config/regenerate-secret
openapi: 3.0.0
info:
  title: M2M Partner API
  description: >
    REST API for M2M partner integrations. Create magic links to enable
    cross-border money transfers, manage end users, track transfer operations,
    handle CIP verification, and configure webhooks for real-time event
    notifications.


    ## Authentication


    All endpoints require an API key passed in the `X-API-Key` header. Use
    `m2m_test_*` keys for the sandbox environment.


    ## Environments


    | Environment | Base URL |

    |---|---|

    | Sandbox | `https://m2m-backend-qa.up.railway.app` |
  version: 0.5.3
  contact: {}
servers:
  - url: https://m2m-backend-qa.up.railway.app
    description: Sandbox
security: []
tags:
  - name: Partner - Magic Links
    description: Create, list, and manage magic links for money transfers
  - name: Partner - Users
    description: View and manage end users associated with your partner account
  - name: Partner - Operations
    description: Track money transfer operations and their statuses
  - name: Partner - CIP
    description: Customer Identification Program (CIP) verification management
  - name: Partner - Data Requests
    description: Fulfill data requests for additional user information
  - name: Partner - Settings
    description: Configure partner-level settings (redirect URLs, etc.)
  - name: Partner - Webhooks
    description: Configure webhook endpoints and inspect delivery history
paths:
  /partner/webhooks/config/regenerate-secret:
    post:
      tags:
        - Partner - Webhooks
      summary: Regenerate webhook secret
      description: >-
        Generates a new webhook signing secret. The new secret is returned in
        the response and will NOT be visible again after this call. Use it to
        verify webhook signatures (HMAC-SHA256).
      operationId: PartnerWebhooksController_regenerateSecret
      parameters: []
      responses:
        '200':
          description: >-
            Webhook secret regenerated — copy the secret now, it will not be
            shown again
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RegenerateSecretResponseDto'
        '401':
          description: Unauthorized — invalid or missing API key / bearer token
      security:
        - bearer: []
        - api-key: []
components:
  schemas:
    RegenerateSecretResponseDto:
      type: object
      properties:
        webhookSecret:
          type: string
          description: The new webhook secret (only shown once)
          example: whsec_abc123def456ghi789
        message:
          type: string
          description: Warning message about secret visibility
          example: Copy this secret now. You will not be able to see it again.
      required:
        - webhookSecret
        - message
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-API-Key
      description: Your partner API key. Use `m2m_test_*` keys for the sandbox environment.

````