Roll an API key

post

https://app.ekas.io/v1/api-keys/{id}/roll

Zero-downtime rotation: the same key receives a new secret (returned once in this response) while the previous secret stays valid until previous_secret_expires_at (24-hour grace window). Rolls are audit-logged. No request body.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

Language

Credentials

Bearer

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200The key, with the new secret present (shown once).

400Invalid request (malformed body, missing/invalid parameter).

401Missing or invalid API key.

403API key lacks a required scope (named in error.param) or test-only endpoint called with a live key.

404No such resource (or it belongs to another mode/subaccount).

409Invalid state transition, in-flight registration conflict, or idempotency key reuse with a different body.

429Rate limit exceeded; see Retry-After. RateLimit-* headers appear on every response, not only 429s.