webhook_secret_recently_rotated
The signing secret was rotated less than five minutes ago. The grace window lets your receiver accept both secrets during the switch; rotating again inside it would invalidate signatures still in flight. It answers as a 422 `business_rule_violation` with `error.subcode` `webhook_secret_recently_rotated`; it is not a request limit and consumes no rate-limit bucket.
| Code | Type | HTTP | Category |
|---|---|---|---|
webhook_secret_recently_rotated | invalid_request_error | 422 | Webhooks |
Cause
The signing secret was rotated less than five minutes ago. The grace window lets your receiver accept both secrets during the switch; rotating again inside it would invalidate signatures still in flight. It answers as a 422 business_rule_violation with error.subcode webhook_secret_recently_rotated; it is not a request limit and consumes no rate-limit bucket.
What to do
Wait five minutes from the last rotation, and deploy the new secret in your receiver before rotating again.