---
title: "Re-issue the API key (old key invalidated immediately)"
method: POST
path: "/api/rightos/organizations/rotate-key"
tags: ["organizations"]
---

# Re-issue the API key (old key invalidated immediately)

`POST /api/rightos/organizations/rotate-key`

## Request

- Base URL: `https://rightos.i-s3.com`
- URL: `https://rightos.i-s3.com/api/rightos/organizations/rotate-key`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-rightos-key`

For suspected leaks or periodic rotation. Requires the current key. The new key is returned exactly once. Lost keys (cannot authenticate) can be recovered self-service via /api/rightos/organizations/recover (email link).

## Response `200`

New key

- object
  - `apiKey` string

## Other responses

- `401`: Missing or invalid API key (error: missing_api_key | invalid_api_key)
- `403`: Demo organization keys cannot be rotated

---

[API](https://skmtc.dev/i-s3/apis/rightos-right-api.md) · [All operations](https://skmtc.dev/i-s3/apis/rightos-right-api/llms.txt) · [OpenAPI document](https://skmtc.dev/i-s3/apis/rightos-right-api/revisions/10020536e345?raw)