webhooks.deliver.secret_unset

webhooks.deliver.secret_unset is not an HTTP error. It is the last_error on a webhook delivery that could not be sent because the webhook has no signing secret. The delivery is marked dead_letter straight away, without retries.

You see it on deliveries returned by GET /v1/webhooks/{id}/deliveries.

Cause

The webhook has no signing secret, so Sautikit cannot sign the request with X-Sautikit-Signature.

Resolution

Call POST /v1/webhooks/{id}/rotate-secret to set a signing secret. New events are then delivered as normal.

Example response

This code does not appear in HTTP error envelopes. It appears as:

{
  "id": "...",
  "status": "dead_letter",
  "last_error": "webhooks.deliver.secret_unset"
}

Next steps

• Call POST /v1/webhooks/{id}/rotate-secret to set a signing secret.
• See Webhook concepts for signature verification details.