Mint or rotate the webhook signing secret
Agents
Mint or rotate the webhook signing secret
Mint (or rotate) your org’s webhook signing secret and return it once. Verify the X-PyAI-Signature on post-call extraction (and transcription-job) webhooks with it: HMAC-SHA256 over "<t>.<rawBody>". Zero-drop rotation: deploy verification that accepts both the old and new secret, call this, then drop the old one. Requires the omni:session scope.
POST
Mint or rotate the webhook signing secret