Rotate Agent Key
rotate_keyRotate an agent's Ed25519 key in planned overlap or emergency retirement mode, generating a new key pair and returning rotation state without persisting data.
Instructions
Rotate an agent's Ed25519 key. Planned mode: configurable overlap (default 24h). Emergency mode: immediate old-key retirement. Builds a rotated DID document for the old key, generates a new key pair, and returns a text summary with the rotation state, the first 16 hex characters of the old and new public keys, the full new private key (redacted on a remote server, MCP_TRANSPORT=sse or MCP_REMOTE=1, as in generate_keys), the DID, the rotation log entry count, and the activation time. The DID document itself is not returned, and nothing is persisted. Delegation revocation is not integrated in this server, so a non-empty delegation_ids_to_revoke is refused before any key is generated.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | ||
| agent_name | No | Agent name for the passport (default: current session) | |
| old_private_key | Yes | Hex-encoded private key being rotated FROM | |
| activation_delay_hours | No | Planned mode overlap hours (default: 24) | |
| delegation_ids_to_revoke | No | Must be empty or absent. Delegation revocation is not integrated in this server, so a non-empty list is refused and nothing is rotated. |