Delete Hook Secrets

The End of Life (EOL) date of Rules and Hooks will be November 18, 2026, and they are no longer available to new tenants created as of October 16, 2023. Existing tenants with active Hooks will retain Hooks product access through end of life.

We highly recommend that you use Actions to extend Auth0. With Actions, you have access to rich type information, inline documentation, and public npm packages, and can connect external integrations that enhance your overall extensibility experience. To learn more about what Actions offer, read Understand How Auth0 Actions Work.

To help with your migration, we offer guides that will help you migrate from Rules to Actions and migrate from Hooks to Actions. We also have a dedicated Move to Actions page that highlights feature comparisons, an Actions demo, and other resources to help you on your migration journey.

To read more about the Rules and Hooks deprecation, read our blog post: Preparing for Rules and Hooks End of Life.

Because we plan to remove Rules and Hooks functions in 2026, you should create new Rules or Hooks only in your Development environment and only to test migration to Actions.

To learn how to migrate your Rules to Actions, read Migrate from Rules to Actions. To learn how to migrate your Hooks to Actions, read Migrate from Hooks to Actions.

When you no longer need Hook Secrets for a given Hook, you can delete them using either the Dashboard or the Management API.

Hook Secrets can also be imported and exported using the Deploy Command-Line Interface (CLI) tool.

Delete Hook Secrets using the Dashboard

1. Navigate to the Hooks page in the Auth0 Dashboard, and click the pencil icon next to the Hook you want to edit.
2. In the Hook editor, click the wrench icon, and click Secrets.
3. Locate the Hook Secret you want to delete, click the trash can icon, and click Yes.

Delete Hook Secrets using the Management API

Make a DELETE call to the Delete Hook Secrets endpoint. Be sure to replace HOOK_ID, HOOK_SECRET_NAME, and MGMT_API_ACCESS_TOKEN placeholder values with your Hook ID, your Hook Secret name(s), and Management API access token, respectively.

cURL

curl --request DELETE \
  --url 'https://{yourDomain}/api/v2/hooks/HOOK_ID/secrets' \
  --header 'authorization: Bearer MGMT_API_ACCESS_TOKEN' \
  --data '{ [ "HOOK_SECRET_NAME", "HOOK_SECRET_NAME" ] }'

Value	Description
HOOK_ID	ID of the Hook for which you want to delete secrets.
MGMT_API_ACCESS_TOKEN	Access Tokens for the Management API with the scope update:hooks. To learn more, read Management API Access Tokens.
HOOK_SECRET_NAME	Name(s) of the secret(s) you would like to delete from the specified Hook. This endpoint accepts an array of secret names to delete.