---
title: "Rotate Credential"
method: POST
path: "/api/v1/apps/connectors/credentials"
tags: ["Connector"]
---

# Rotate Credential

`POST /api/v1/apps/connectors/credentials`

Rotate credentials for a connector.

## Request body

- C1ApiAppV1ConnectorServiceRotateCredentialRequest — ConnectorServiceRotateCredentialRequest is a request for rotating connector credentials. It uses URL values for input.
  - `appId` string — The appId of the app the connector is attached to.
  - `connectorId` string — The connectorId of the connector that we are rotating the credentials for.

## Response `200`

ConnectorServiceRotateCredentialResponse is the response returned by the rotate method.

- C1ApiAppV1ConnectorServiceRotateCredentialResponse — ConnectorServiceRotateCredentialResponse is the response returned by the rotate method.
  - `credential` C1ApiAppV1ConnectorCredential — ConnectorCredential is used by a connector to authenticate with conductor one.
    - `appId` string — The appId of the app the connector is attached to.
    - `clientId` string — The client id of the ConnectorCredential.
    - `clientSecret` string — The client secret of the ConnectorCredential. It's only returned on creation.
    - `connectorId` string — The connectorId of the connector the credential is associated with.
    - `createdAt` string, date-time, nullable
    - `deletedAt` string, date-time, nullable
    - `displayName` string — The display name of the ConnectorCredential.
    - `expiresTime` string, date-time, nullable
    - `id` string — The id of the ConnectorCredential.
    - `lastUsedAt` string, date-time, nullable
    - `updatedAt` string, date-time, nullable

## Changes

- **2026-08-21** `f2cf3228f366` — 2 breaking, 11 warning
  - added `#/components/schemas/c1.api.app.v1.ConnectorCredential, subschema #2` to the `credential` response property `oneOf` list for the response status `200`
  - the `credential` response's property type changed from `object` to no type for status `200`
  - removed the optional property `credential/appId` from the response with the `200` status
  - removed the optional property `credential/clientId` from the response with the `200` status
  - …9 more
- **2025-09-08** `d8ad3d78289e` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/apps/connectors/credentials/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) · [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)