SnozeDevelopers
API referenceAutomations

Reveal a webhook automation's signing secret

Returns the current signing secret of a webhook automation so an editor can configure the sender, and records the reveal as an audit event. The secret is read under the same lock as rotation, so a reveal never returns a secret a concurrent rotation has revoked, and only a reveal that returned a secret is audited. Requires the `automations:write` permission plus edit access; an automation whose published trigger is not a webhook is rejected with a validation error. The response is never stored for idempotent replay.

POST
/v1/workspaces/{workspaceId}/automations/{automationId}/webhook-secret/reveal

Authorization

apiKey
headerAuthorizationBearer <snoze_sk_…>

Workspace API key created in Workspace settings → API keys. Scopes on the key bound what it can read and write.

Path Parameters

workspaceId*string
automationId*string

Response Body

Success

application/json
  1. response
data*
Example Request
curl -X POST 'https://api.snoze.dev/v1/workspaces/string/automations/string/webhook-secret/reveal'
Example Response
{  "data": {    "secret": "string"  }}

Rotate a webhook automation's signing secret

Generates a new signing secret for a webhook-triggered automation, stores it encrypted, and returns it with the automation. Requires the `automations:write` permission plus edit access; an automation that has not been published, or whose published trigger is not a webhook, is rejected with a validation error. Send an `Idempotency-Key` header to make retries safe; a replay within the window returns the original response.

Get a single automation run

Returns one run with its per-node executions. Requires the `automations:read` permission plus view access to the automation; an unknown automation or run returns not-found.