Create and delete webhook endpoints from the admin dashboard. Once created, the dashboard
displays your signing secret (whsec_...) — store it in your secrets manager immediately.
For programmatic management, use your app API key with the
App Management API.
Rotate the signing secret
If a secret is compromised, rotate it via the
Rotate webhook signing secret
endpoint or from the admin dashboard. The old secret stops working immediately.
Store the new secret immediately. You cannot retrieve it later.
Replay failed deliveries
Re-send all failed deliveries from the last 7 days via the
Replay failed deliveries endpoint.
Pausing and updating
Pause, resume, or update webhook settings (URL, event types) from the admin dashboard.