adminengineer
Developer Settings
Check webhook-secret status, rotate credentials, and copy integration examples safely.
Reviewed 2026-06-21Product 1.1
Access
Viewing requires developer_tools:view; rotating the secret requires developer_tools:manage and the corresponding plan feature.
Secret rotation
The page shows whether an event-ingestion secret is configured, its prefix, and rotation time. The full secret is returned only when it is created or rotated.
- Prepare every event sender for the new value.
- Rotate the secret during a coordinated window.
- Store it directly in your secret manager.
- Update and restart senders, then send a synthetic event.
The previous secret becomes invalid immediately. There is no overlap window.
Terminology
VertexY does not issue a general-purpose API key here. Bearer JWTs authenticate protected APIs; the displayed secret authenticates only signed event ingestion.