---
title: "Rotate a connection credential and require re-verification"
method: POST
path: "/v1/microsoft/business-central/connections/{connectionId}/credentials"
---

# Rotate a connection credential and require re-verification

`POST /v1/microsoft/business-central/connections/{connectionId}/credentials`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/microsoft/business-central/connections/{connectionId}/credentials`
- Auth: HTTP bearer

Default off and outside the MCP OAuth profile. Requires a separate OWNER or ADMIN organization API key with org:integrations:write, org:* or * scope. Accounts must have supplied a fresh signed v2 or v3 purchaser tenant; the customer cannot enter or rebind tenant authority. Administrators authorize an environment/company and dedicated read-only BC application separately. Credentials are encrypted with an explicitly configured integration custody key and never returned. Verification performs bounded reads only; no ERP write is available.

## Path parameters

- `connectionId` string, uuid, required

## Request body

- CommerceConnectionCredentials
  - `org_id` string, uuid, required
  - `expected_revision` integer, required
  - `client_secret` string, required

## Response `200`

Bounded private result; no downstream action is executed

- CommerceConnectionResponse
  - `connection` object, required
    - `connection_id` string, uuid, required
    - `org_id` string, uuid, required
    - `display_name` string, required
    - `environment_name` string, required
    - `company_id` string, uuid, required
    - `revision` integer, required
    - `status` 'PENDING' | 'ACTIVE' | 'DISCONNECTED', required
    - `verified_at` string, date-time, nullable, required

## Other responses

- `400`: Invalid or unexpected fields, or mismatched idempotency key
- `401`: Authentication required
- `403`: Current authority, consent, scope or organization denied
- `404`: Authorized source or report unavailable
- `409`: Source revision, policy, idempotency or uncertain attempt conflict
- `429`: Request rate limit reached
- `503`: Feature disabled or required authority, source or policy unavailable

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)