A signing secret is generated on save and shown once. Use it to verify the HMAC signature on your endpoint.