---
title: Regenerate Organization Webhook Endpoint Signing Secret
url: https://platform.claude.com/docs/en/api/php/beta/organization/webhooks/regenerate_signing_secret
---

# Regenerate Organization Webhook Endpoint Signing Secret

`$client->beta->organization->webhooks->regenerateSigningSecret(string webhookEndpointID, ?list<AnthropicBeta> betas): OrganizationWebhookEndpointSigningSecret`

**POST** `/v1/organizations/webhooks/{webhook_endpoint_id}/regenerate_signing_secret`

Replace an organization webhook endpoint's signing secret. The old secret stops
working immediately. The new secret is returned only in this response.

Every request must include the beta header `anthropic-beta: webhooks-2026-10-07`. A request without it returns `404`, exactly as if this API did not exist. Anthropic turns organization webhook endpoints on for each organization; until yours is on, requests also return `404`. Organization webhook endpoints are in beta and are not available to organizations with HIPAA readiness enabled.

## Parameters

- `webhookEndpointID: string` (path parameter)

  ID of the webhook endpoint.

- `betas?: optional list<AnthropicBeta>` (header parameter)

  This endpoint is in beta: requests must send `webhooks-2026-10-07` in this header.

## Returns

- `class OrganizationWebhookEndpointSigningSecret`

  - `string signingSecret`

    The new signing secret. Deliveries are signed with it from now on, and no other response returns it.

## Example

```php
<?php

require_once dirname(__DIR__) . '/vendor/autoload.php';

use Anthropic\Client;
use Anthropic\Beta\AnthropicBeta;

$client = new Client(apiKey: 'my-anthropic-api-key');

$betaOrganizationWebhookEndpointSigningSecret = $client
  ->beta
  ->organization
  ->webhooks
  ->regenerateSigningSecret(
  'webhook_endpoint_id', betas: [AnthropicBeta::MESSAGE_BATCHES_2024_09_24]
);

var_dump($betaOrganizationWebhookEndpointSigningSecret);
```

### Response (200)

```json
{
  "signing_secret": "signing_secret"
}
```