Hey @SamKK,
This was discussed to some degree here: Help with authenticating webhook signature - #2 by Jason
I’ll look into getting a note added into the documentation to reflect the requirements.
If you need to reset the master_api key, you can reach out to the support team and we can have it reset for you.
Thanks,
Tyler