Retrieve the Signing Secret
Return the current HMAC signing secret for this subscription. Use this if you lost the secret after creation — the endpoint is audited and rate-limited for safety.
GET
Retrieve the current signing secret
Authorizations
Per-request DPoP proof JWT (RFC 9449). MUST accompany the Authorization: DPoP <access_token> header on every protected operation. The proof is signed by the merchant's private DPoP key and carries htm, htu, iat, jti, and ath claims.
Path Parameters
Pattern:
^whk_[a-zA-Z0-9]+$Response
Current secret.
Retrieve the current signing secret