# Enable or Rotate Task Webhook Secret

> Enable or Rotate Task Webhook Secret is a paid API for AI agents from agents.withzero.xyz, paid per call via MPP, price unknown, status unknown (last checked 2026-09-11).

Generates or rotates the webhook secret for a scheduled task, enabling the task to be triggered via HTTP POST without a wallet.

## Facts

- Endpoint: PUT https://agents.withzero.xyz/api/v1/scheduler/tasks/{id}/webhook
- Price: price unknown
- Payment: MPP
- Status: unknown
- Last checked: 2026-09-11
- Activations on Zero: 0
- Provider: agents.withzero.xyz
- Website: https://agents.withzero.xyz
- Canonical page: https://www.zero.xyz/c/agents-withzero-xyz-enable-or-rotate-task-webhook-secret-045d6432
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_S6t3Z4tJr-ttl63UXtBMj

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agents-withzero-xyz-enable-or-rotate-task-webhook-secret-045d6432 -d '<json body>'
```

Example prompt: Enable the webhook trigger for my scheduled task abc123 so I can fire it from an external service without needing a wallet — give me the bearer secret.

## When to prefer this

Use this endpoint when you need to allow an external system, CI pipeline, or automation tool to trigger a WithZero scheduled task via HTTP POST without requiring a crypto wallet or payment header. It is the right choice when setting up webhook-based integrations for the first time, or when rotating a potentially compromised secret.

## Known failure modes

- Task ID not found — 404 if the specified task does not exist or belongs to another caller
- Unauthorized — 401 if the caller's proof does not match the task owner
- Secret lost permanently — if the caller does not save the returned secret, it cannot be retrieved again and must be rotated
- Service error — 500 if the rotation fails server-side

## How this service works

Enable or rotate the task webhook secret (returned ONCE). Present it as Authorization: Bearer to POST /tasks/:id/webhook to trigger a run without a wallet. 📖 Full guide: https://scheduler.withzero.xyz/llms.txt

## Output

Returns a one-time-visible webhook secret string and a boolean indicating the webhook is enabled. The secret must be saved immediately as it will not be shown again; it should be used as an Authorization: Bearer header when POSTing to the task's webhook endpoint.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "properties": {},
 "description": "Empty body. Enables or rotates the task webhook secret.",
 "additionalProperties": false
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "secret",
  "enabled"
 ],
 "properties": {
  "secret": {
   "type": "string",
   "description": "The webhook secret — shown ONCE. Present it as `Authorization: Bearer <secret>` to POST /api/v1/tasks/:id/webhook."
  },
  "enabled": {
   "type": "boolean"
  }
 },
 "additionalProperties": false
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agents-withzero-xyz-enable-or-rotate-task-webhook-secret-045d6432/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agents.withzero.xyz](https://www.zero.xyz/host/agents.withzero.xyz/llms.txt)