Rotate a signing secret
Mint a new signing secret for this endpoint, keeping its id, its subscription and its delivery history. This exists so a leaked secret does not force a delete-and-recreate.
Credential: API token · Role: owner or admin (manage_team)
Warning
The signing secret is returned by this response only (and by rotate-secret). It is never on a list, a GET or a PATCH, and there is no way to recover it later — store it now.
Authorizations
An API token (pv_ut_…) as Authorization: Bearer pv_ut_…. X-Peeve-Key is accepted too. Never a query parameter — URLs end up in proxy logs and Referer headers.
The token carries its owner's live workspace role, re-read on every call.