Apps

Rotate an app token (revoke old, create new) (v2, tenant actor)

Auth: Tenant Actor

Revokes the old token (best-effort) and returns a new token once. Supports User JWT and B2B Server JWT.

post/v2/apps/{appId}/tokens/{tokenId}/rotate

Request

  • Base URL: https://api.chat.ethora.com
  • URL: https://api.chat.ethora.com/v2/apps/{appId}/tokens/{tokenId}/rotate
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer

Path parameters

appIdstring required

Target App ID. Must be an app the calling actor owns or has been delegated access to.

tokenIdstring required

Token ID to rotate. The existing secret is replaced; the response carries the new JWT.

Request body

labelstring

Optional human-readable label for the rotated token (e.g. prod-2026-07). Stored on the token record.

Response

Success

okboolean required
appIdstring required
revokedTokenIdstring
tokenIdstring required
tokenstring required

Returned once. Store securely.

labelstring nullable
createdAtstring nullable

Example response

{
  "ok": true
}

Changes

No recorded changes to this operation across all 1 revision of this API.