FAfatzebra
Merchants

Rotate a merchant's credentials

Rotates the merchant's API token and its signing_secret. No body is expected. The fresh values are returned once — the previous token stops working immediately, so the caller must store the response.

The response is a bare credentials object: username, token, signing_secret, rotated_at.

post/merchants/{username}/credentials/rotate

Request

  • Base URL
    https://gateway.pmnts.io/v2/partners
  • URL
    https://gateway.pmnts.io/v2/partners/merchants/{username}/credentials/rotate
  • Auth
    HTTP basic

Response

The rotated credentials (returned once).

usernamestring required

The merchant's username (e.g. acme-store).

tokenstring required

The newly-generated API token (e.g. tok_live_3b9c1d…).

signing_secretstring required

The newly-generated signing secret — the merchant's paynow/HMAC secret.

rotated_atstring date-time required

When the credentials were rotated — ISO 8601 UTC (e.g. 2026-06-02T00:00:00Z).

Changes

No recorded changes to this operation across all 1 revision of this API.