---
title: "Rotate app token"
method: POST
path: "/firewall/apps/{app_id}/token"
---

# Rotate app token

`POST /firewall/apps/{app_id}/token`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/firewall/apps/{app_id}/token`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `firewall:write`

creates a new token and revokes the current token if it exists for a Zen app

## Path parameters

- `app_id` integer, required

## Response `200`

The token for the app has been successfully rotated

- object
  - `token` string: The newly rotated token.

## Other responses

- `404`: App not found

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)