---
title: "Key-rotation impact (credentials under current key)"
method: GET
path: "/v1/keys/impact"
tags: ["Issuer Keys"]
---

# Key-rotation impact (credentials under current key)

`GET /v1/keys/impact`

Preview the blast radius of a key rotation without performing one: returns how many currently-issued credentials would continue to verify under the current key after rotation (overlapping validity). Call it before POST /v1/keys/rotate to understand the impact. Authenticated with the tenant API key.

## Response `200`

The rotation-impact preview for the tenant.

- object
  - `credentials_under_active_key` integer — Count of the tenant's currently-issued (status == issued, not soft-deleted) credentials that would continue to verify under the current key after rotation, because the rotated key stays valid during its overlap window.
  - `note` string — Human-readable explanation of the rotation-overlap behaviour.

## Changes

- **2026-06-30** `1ee4908e9af4` — 1 info
  - added the media type `application/json` for the response with the status `200`

[Change history](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/changes/v1/keys/impact/get.md)

---

[API](https://skmtc.dev/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/revisions/2eeb13158ffa/schema)