Skip to content

Identity Verification Secrets

Manage HMAC signing secrets for Messenger identity verification — list, create, and rotate out. Signing material is returned only once, at creation time.

List all identity verification secrets

Request

Returns the identity verification secrets configured for your workspace.

Each entry includes metadata only — the HMAC signing material itself is never returned by this endpoint. The raw secret is only available once, in the response to POST /secure_mode_secrets. Persist it at that moment.

Security
bearerAuth
Headers
Intercom-Versionstring(intercom_version)

Intercom API version.
By default, it's equal to the version set in the app package.

Default:"Preview"
Enum:"1.0""1.1""1.2""1.3""1.4""2.0""2.1""2.2""2.3""2.4"
Example:Preview
curl -i -X GET \
  https://api.intercom.io/secure_mode_secrets \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
  -H 'Intercom-Version: Preview'

Responses

Successful response

Bodyapplication/json
typestring

The type of the object

Value:"list"
Example:"list"
dataArray of objects(Identity Verification Secret)

The identity verification secrets configured for the workspace.

Response
{ "type": "list", "data": [ {} ] }