Skip to content

    Arabic or English · ↑↓ to move · Enter to open · Esc to close

    العربية
    On this page

    Numbers

    Rotate the signing secret

    POST/v2/numbers/{numberId}/webhook/rotate-secret
    • Scope:webhooks:write
    • Idempotency-Key:optional
    • changes settings

    The new secret is shown once; the old one stops at once.

    Parameters

    Path

    NameTypeConstraintsDescription
    numberIdrequiredTypestringConstraints—DescriptionNumber id (GET /v2/numbers).

    Headers

    NameTypeConstraintsDescription
    Idempotency-KeyoptionalTypestringConstraints≤ 191 charsDescriptionYour unique id for this operation (≤ 191 visible ASCII). A retry with the same key and body returns the first answer with Idempotent-Replayed: true — it never runs twice. Kept 24 h.
    X-Request-IdoptionalTypestringConstraints—DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support.

    Request

    curl -X POST "https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/webhook/rotate-secret" \
      -H "Authorization: Bearer $WASLA_API_KEY" \
      -H "Idempotency-Key: order-1042-confirm"

    Response

    200Example

    200 — application/json
    {
      "numberId": "cm1abcd2345efgh6789ijkl",
      "secret": "whsec_…"
    }

    Response schema

    Fields of the example answer. Expand objects and arrays.

    • responseobject2 fields
      • numberIdstring "cm1abcd2345efgh6789ijkl"
      • secretstring "whsec_…"

    Errors

    Only the common authentication, rate-limit and validation errors.

    Errors →

    Try it

    Send this request from your browser to the Mursilat API.

    documented example

    Preview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.

    Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (changes settings)

    Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.

    Path parameters

    Send this request for real?

    This changes your account settings.

    POST /v2/numbers/{numberId}/webhook/rotate-secret