---
title: "POST /api/v2/secret-rotations/stripe-api-key/{rotationId}/move"
method: POST
path: "/api/v2/secret-rotations/stripe-api-key/{rotationId}/move"
tags: ["Secret Rotations"]
---

# POST /api/v2/secret-rotations/stripe-api-key/{rotationId}/move

`POST /api/v2/secret-rotations/stripe-api-key/{rotationId}/move`

Move the specified Stripe API Key Rotation to a different secret path or environment.

## Path parameters

- `rotationId` string, uuid, required

## Request body

- object
  - `destinationEnvironment` string, required
  - `destinationSecretPath` string, required
  - `overwriteDestination` boolean

## Response `200`

Default Response

- object
  - `secretRotation` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `isAutoRotationEnabled` boolean
    - `activeIndex` number
    - `folderId` string, uuid, required
    - `connectionId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `rotationInterval` number, required
    - `rotationStatus` string, required
    - `lastRotationAttemptedAt` string, date-time, required
    - `lastRotatedAt` string, date-time, required
    - `lastRotationJobId` string, nullable
    - `nextRotationAt` string, date-time, nullable
    - `isLastRotationManual` boolean
    - `connection` object, required
      - `app` 'stripe', required
      - `name` string, required
      - `id` string, uuid, required
    - `environment` object, required
      - `slug` string, required
      - `name` string, required
      - `id` string, uuid, required
    - `projectId` string, required
    - `folder` object, required
      - `id` string, required
      - `path` string, required
    - `rotateAtUtc` object, required
      - `hours` number, required
      - `minutes` number, required
    - `lastRotationMessage` string, nullable
    - `type` 'stripe-api-key', required
    - `parameters` object, required
      - `keyName` string — The name for each Stripe API key this rotation creates, up to 80 characters. Infisical appends a timestamp so the old and new key can be told apart. Defaults to 'infisical-managed'.
      - `permissions` string[], required — The permissions granted to the generated Stripe API key. Stripe has no wildcard permission, so this is the full list of what the key may do.
    - `secretsMapping` object, required
      - `apiKey` string, required — The name of the secret that the rotated Stripe API key will be mapped to.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

## Changes

- **2026-09-30** `88fe091e1167` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v2/secret-rotations/stripe-api-key/:rotationId/move/post.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) · [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/88fe091e1167?raw)