# Onvexia Webhook Secret Rotate

> Onvexia Webhook Secret Rotate is a paid API for AI agents from onvexia.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-19).

Rotates the webhook secret for a specific alert, invalidating the old secret and generating a new one for secure webhook verification.

## Facts

- Endpoint: POST https://onvexia.com/v1/alerts/%7Bid%7D/webhook-secret/rotate
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/onvexia-webhook-secret-rotate-c25cb1d3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2Zmiiourh6ohtOGOcfQKK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability onvexia-webhook-secret-rotate-c25cb1d3 -d '<json body>'
```

Example prompt: My Onvexia alert webhook secret may have been exposed — can you rotate the secret for alert ID a7f3c2d9 so I get a fresh signing key?

## When to prefer this

Use this endpoint when you need to invalidate a compromised, leaked, or stale webhook signing secret for an Onvexia blockchain alert. Prefer this over deleting and recreating an alert when the alert configuration itself is still valid but the secret needs cycling. Appropriate for post-incident response, routine credential rotation policies, or transferring webhook ownership to a new consumer.

## Known failure modes

- Alert ID not found — returns empty data array
- Unauthorized access if caller lacks permission for the alert
- Invalid or malformed alert ID in path parameter
- Payment failure if USDC micropayment is not processed correctly
- Server error if secret generation fails internally

## How this service works

Thousands of assets across ten chains, half a million analysed documents, labelled addresses and supply-age history reaching back to 2008 — fused into one reading per asset. REST, SQL, GraphQL and MCP.

## Output

Returns a JSON object containing the new webhook secret for the specified alert, along with metadata about the alert and a link to the OpenAPI documentation. The old secret is immediately invalidated upon successful rotation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": [],
  "meta": {
   "docs": "https://onvexia.com/openapi.json",
   "endpoint": "/v1/alerts/{id}/webhook-secret/rotate"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/onvexia-webhook-secret-rotate-c25cb1d3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from onvexia.com](https://www.zero.xyz/host/onvexia.com/llms.txt)