---
title: "A new read-write token (the old one stops working within 5 seconds); update BLOB_READ_WRITE_TOKEN"
method: POST
path: "/storage/vercel-blob-stores/{storeId}/rotate"
tags: ["Storage"]
---

# A new read-write token (the old one stops working within 5 seconds); update BLOB_READ_WRITE_TOKEN

`POST /storage/vercel-blob-stores/{storeId}/rotate`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/storage/vercel-blob-stores/{storeId}/rotate`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `storeId` string, required

## Response `200`

The new token

- object
  - `storeId` string, required
  - `organizationId` string, uuid, required
  - `projectId` string, uuid, nullable, required
  - `bucketId` string, uuid, required: the storage bucket that holds the files (it counts toward your storage allowance)
  - `bucket` string, required: its S3 name
  - `access` 'public' | 'private', required: public: files are readable by anyone with their URL; private: only with the store's token
  - `legacyStoreIds` string[], required
  - `apiUrl` string, required: VERCEL_BLOB_API_URL / NEXT_PUBLIC_VERCEL_BLOB_API_URL for the app
  - `publicBaseUrl` string, nullable, required: where public files are served: <publicBaseUrl><pathname>
  - `createdAt` string, required: ISO-8601 timestamp
  - `updatedAt` string, required: ISO-8601 timestamp
  - `token` string, required: BLOB_READ_WRITE_TOKEN for the app: shown only in this response
  - `webhookPublicKey` string, nullable, required: BLOB_WEBHOOK_PUBLIC_KEY: verifies callbacks of presigned uploads

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `402`: A storage limit is reached (code limit_reached)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Vercel compatibility is not configured on this server (code not_configured)
- `503`: The storage server is unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)