API operations

Signing secret

One-time secret display remains an application security boundary.

API docs Create endpoint

Signing secret rotated

Copy this secret now

The application displays the full value once and owns encrypted storage and rotation overlap.

New signing secret