---
title: lf webhook-secret
description: Manage app.webhook_signing_secret used by the audit.webhook_outbox HMAC dispatcher.
---

<!-- AUTO-GEN-START -->

# `lf webhook-secret`

Manage app.webhook_signing_secret used by the audit.webhook_outbox HMAC dispatcher.

## `lf webhook-secret strict`

Toggle app.webhook_strict_signing — when ON, dispatcher refuses to send unsigned payloads.

| Flag | Type | Required | Description |
|---|---|---|---|
| `<mode>` | positional | yes | on | off |

<!-- AUTO-GEN-END -->
