Account credentials

Replace a credential atomically without expanding its authority

Use an explicit credentials:write account bearer grant or a live email-verified application session, plus the current account password as fresh identity proof. Cookie writes require a trusted Origin. Machine callers cannot issue scopes beyond their own grant or outlive it. Creation and rotation return the secret once; metadata never includes it. Scope and expiry can only be narrowed. Issued credentials expire within 24 hours and no later than their issuer session; session revocation invalidates them.

post/account-credentials/{credentialId}/rotate

Request

  • Base URL: https://app.communicate.so/api/v1
  • URL: https://app.communicate.so/api/v1/account-credentials/{credentialId}/rotate
  • Auth: one of:
    • HTTP bearer
    • API key in cookie __Secure-better-auth.session_token
    • API key in cookie better-auth.session_token

Path parameters

credentialIdstring uuid required

Headers

Originstring uri

Required for cookie authentication: an exact trusted application origin configured by the server. Bearer requests do not require Origin.

Request body

passwordstring password required

Response

Replace a credential atomically without expanding its authority

idstring uuid required
namestring required
prefixstring required
scopesstring[] required
expiresAtstring date-time required
tokenstring required

One-time credential secret; not present in subsequent metadata reads.

Changes

No recorded changes to this operation across all 1 revision of this API.