Set a customer-provided HMAC secret for webhook signing.

Request

Sets a customer-provided HMAC secret for the specified project. The full secret is returned once in the response body — this is the only time it is visible in plain text. Store it securely immediately after this call.

Security

OAuth2(Required scopes: write)

Path

projectIdstringrequired

Customer's project id

Bodyapplication/jsonrequired

The new HMAC secret to associate with the project ID.

hmacSecretstring, (password)

The HMAC secret to be updated for the specified project

curl -i -X PATCH \
  'https://compliance.api.sinch.com/v1/projects/{projectId}/callbackConfig' \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
  -H 'Content-Type: application/json' \
  -d '{
    "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
  }'

Responses

Secret updated. The full secret is returned once — store it securely.

Bodyapplication/json

projectIdstringread-only

Project ID this callback configuration belongs to.

hmacSecretstring, (password)read-only

The full HMAC secret for webhook signature verification. Returned only once — on creation or rotation.

Response

{
  "projectId": "proj-123",
  "hmacSecret": "d1c7ccbf-919d-462f-8587-dec95a1b11ee"
}

We'd love to hear from you!