---
title: "Move orgs onto the KEK protection level their tier and payment call for"
method: POST
path: "/v1/admin/kms/relevel"
tags: ["Admin"]
---

# Move orgs onto the KEK protection level their tier and payment call for

`POST /v1/admin/kms/relevel`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/admin/kms/relevel`
- Auth: HTTP bearer

Platform admins only. Examines up to `limit` orgs whose stored KEK level disagrees with the target (Pro earns HSM only with an active subscription; Team, Business and Enterprise keep HSM; the platform org is always software) and starts a migration for each: a new key at the right level, every secret and every org-scoped row re-wrapped, the old key released from the keep set 30 days after completion. The nightly consolidation job runs the same pass, 25 orgs at a time.

## Query parameters

- `limit` integer

## Response `200`

Orgs examined and migrations started

- object
  - `examined` integer
  - `migrations_started` integer
  - `limit` integer

## Other responses

- `403`: Not a platform admin

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)