Skip to main content
GET
Get Webhook Secret

Authorizations

X-API-Key
string
header
required

Response

Successful Response

The authenticated developer's webhook signing secret (GET .../webhook-secret).

The same per-developer secret used to HMAC-sign the X-Phota-Signature header on async job callbacks. Use it to verify a callback's authenticity: recompute sha256 HMAC over the exact received body and compare.

webhook_signing_secret
string
required

Per-developer HMAC key for verifying the X-Phota-Signature on job callbacks.