api-key-rotate
Rotate API keys by revoking old credentials and issuing new ones, with configurable grace periods to maintain service continuity. Save the new key immediately.
Instructions
Rotate a platform API key by revoking the old key and issuing a new one. The new key value is returned ONLY in this response, so save it immediately. An optional grace period keeps the old key valid during transition. Use this for periodic key rotation or when a key may be compromised but you need continuity. Requires scope: settings:write. For immediate revocation without replacement, use api-key-revoke instead.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | API key hash to rotate | |
| gracePeriodHours | No | Hours the old key remains valid after rotation (default: 24) |