Execution Intents

Rotate a binding credential

Overwrite the stored credential for a binding without touching its config or guardrails. Human-only. The credential value is never returned.

post/v1/agents/{agent_id}/bindings/{binding_id}/rotate-credential

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/agents/{agent_id}/bindings/{binding_id}/rotate-credential
  • Auth: HTTP bearer

Path parameters

agent_idstring uuid required
binding_idstring uuid required

Request body

credentialunknown required

Response

Updated binding

idstring uuid required
agent_idstring uuid required
binding_type'http' | 'graphql' | 'postgres' | 'mysql' | 'redis' | 'grpc' | 'smtp' | 'cloud_sdk' | 's3' | 'custom' required
namestring required
configobject
is_activeboolean required
credential_setboolean

Whether a credential is stored for this binding. The value itself is never returned.

credential_source_type'inline' | 'vault_ref' nullable

How the credential is sourced — inline (HSM-encrypted copy) or vault_ref (live pointer).

credential_vault_idstring uuid nullable

For vault_ref credentials — the vault containing the referenced secret.

credential_pathstring nullable

For vault_ref credentials — the secret path in the referenced vault.

created_atstring date-time required
updated_atstring date-time required

Changes

No recorded changes to this operation across all 2 revisions of this API.