---
title: "Rotate the partner's own API token"
method: POST
path: "/me/credentials/rotate"
tags: ["Partner"]
---

# Rotate the partner's own API token

`POST /me/credentials/rotate`

## Request

- Base URL: `https://gateway.pmnts.io/v2/partners`
- URL: `https://gateway.pmnts.io/v2/partners/me/credentials/rotate`
- Auth: HTTP basic

Rotates the partner's API `token`. No body is expected. The fresh value
is returned once — the previous token stops working immediately, so the
caller must store the response.

## Response `200`

The rotated credentials (returned once).

- PartnerCredentials: Returned once by `POST /me/credentials/rotate`. The full `token` is shown here and never again.
  - `username` string, required: The partner's username (e.g. `acme-partner`).
  - `token` string, required: The newly-generated API token (e.g. `sk_live_8f3a…`).
  - `rotated_at` string, date-time, required: When the credentials were rotated — ISO 8601 UTC (e.g. `2026-06-02T00:00:00Z`).

## Other responses

- `401`: Missing or invalid HTTP Basic credentials.

---

[API](https://skmtc.dev/fatzebra/apis/fat-zebra-partner-api.md) - [All operations](https://skmtc.dev/fatzebra/apis/fat-zebra-partner-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fatzebra/apis/fat-zebra-partner-api/revisions/10f1181ea916?raw)