---
title: "Rotate the wallet's data-encryption key"
method: POST
path: "/wallets/keys/rotate"
---

# Rotate the wallet's data-encryption key

`POST /wallets/keys/rotate`

## Request

- Base URL: `https://getsanction.com/api/v1`
- URL: `https://getsanction.com/api/v1/wallets/keys/rotate`
- Auth: API key in header `x-mgmt-key`

Rotate the per-wallet DEK; existing credentials are re-wrapped under the new key version. Owner-only.

## Request body

- object
  - `wallet_id` string, required

## Response `200`

Rotated; returns the new key version

## Other responses

- `401`: Management key required

---

[API](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api.md) · [All operations](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api/revisions/c645a9e4b72d?raw)