Rotate Service Key

POST /service-keys/{service_key_id}/rotate

The old hash is retired immediately; there is no overlap window for an API key.

Role floor

Requires admin or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Parameters

Name	In	Type		Notes
service_key_id	path	string (uuid)	required	—

Responses

Status	Description	Body
200	Successful Response	ServiceKeyWithSecret
422	Validation Error	HTTPValidationError

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

curl -X POST https://your-deployment.example.com/service-keys/{service_key_id}/rotate \
  -H "Authorization: Bearer $COBRE_TOKEN"

Response — ServiceKeyWithSecret

Field	Type		Notes
key	string	required	—
service_key	ServiceKeyView	required	—