---
title: "Rotate an API client secret"
method: POST
path: "/api-regulated/v1/api-clients/{apiClientId}/rotate-secret"
tags: ["ApiClient"]
---

# Rotate an API client secret

`POST /api-regulated/v1/api-clients/{apiClientId}/rotate-secret`

## Request

- Base URL: `https://api.currencyguard.com`
- URL: `https://api.currencyguard.com/api-regulated/v1/api-clients/{apiClientId}/rotate-secret`
- Auth: OAuth 2 (implicit, authorization URL `https://auth.currencyguard.com/oauth2/authorize`, scopes: `regulated.api-clients.canManageApiClients`)

Issues a new secret and returns it once. The previous secret stops working immediately, so deploy the new one before rotating.

**Required entitlement:** `regulated.api-clients.canManageApiClients`  
_Entitles the regulated user to create, view, rotate, and delete API clients for server-to-server integration_

## Path parameters

- `apiClientId` string, uuid, required

## Response `200`

OK

---

[API](https://skmtc.dev/currencyguard/apis/currencyguard-trading-system-api-external.md) · [All operations](https://skmtc.dev/currencyguard/apis/currencyguard-trading-system-api-external/llms.txt) · [OpenAPI document](https://skmtc.dev/currencyguard/apis/currencyguard-trading-system-api-external/revisions/a1f3f854190d?raw)