Sign in
Issuer Keys

Key-rotation impact (credentials under current key)

Preview the blast radius of a key rotation without performing one: returns how many currently-issued credentials would continue to verify under the current key after rotation (overlapping validity). Call it before POST /v1/keys/rotate to understand the impact. Authenticated with the tenant API key.

get/v1/keys/impact

Response

The rotation-impact preview for the tenant.

credentials_under_active_keyinteger

Count of the tenant's currently-issued (status == issued, not soft-deleted) credentials that would continue to verify under the current key after rotation, because the rotated key stays valid during its overlap window.

notestring

Human-readable explanation of the rotation-overlap behaviour.

Example response

{
  "credentials_under_active_key": 4213,
  "note": "These credentials would continue to verify under the current key after rotation (overlapping validity)."
}

Changes