---
title: "Rotate client secret"
method: POST
path: "/admin/oauth-clients/{id}/rotate-secret"
tags: ["OAuth Clients"]
---

# Rotate client secret

`POST /admin/oauth-clients/{id}/rotate-secret`

Generate a new client secret. The previous secret is immediately invalidated.

The new secret is shown only once — store it securely.

## Path parameters

- `id` string, required

## Response `200`

Successful Response

- OAuthClientRotateSecretResponse — Returned on secret rotation — the new one-time plaintext secret.
  - `client_secret` string, required — The new client secret. Store it securely; the previous secret is now invalid.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

## Changes

- **2026-08-31** `170ab6ea6e23` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/admin/oauth-clients/:id/rotate-secret/post.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc.dev/jentic/apis/jentic-control-plane-api/revisions/e4688b93dfc7?raw)