---
title: "Rotate Secret"
method: POST
path: "/api/v1/iam/external_oauth_clients/rotate-secret"
tags: ["External OAuth Client"]
---

# Rotate Secret

`POST /api/v1/iam/external_oauth_clients/rotate-secret`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/iam/external_oauth_clients/rotate-secret`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

RotateSecret issues a new client secret for a static client and returns it
 once. The client keeps its client_id, redirect URIs, and grants.

## Request body

- C1ApiIamV1ExternalOAuthClientServiceRotateSecretRequest: The ExternalOAuthClientServiceRotateSecretRequest message.
  - `clientId` string: The clientId field.

## Response `200`

Successful response

- C1ApiIamV1ExternalOAuthClientServiceRotateSecretResponse: The ExternalOAuthClientServiceRotateSecretResponse message.
  - `clientSecret` string: Revealed once, like Create.

## Changes

- **2026-10-20** `fe943bedf41b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/iam/external_oauth_clients/rotate-secret/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)