Organizations

Rotate an organization API key

Atomic mint-new + immediately-revoke-old, with the same name and scopes as the original. The full new secret is returned only in this response. No grace period — old key is invalid immediately. If you need overlap with an in-flight deploy, create a second key first via POST /orgs/{org_id}/api-keys, ship, then DELETE the old key. Owners and admins may rotate any org key; members may rotate keys they created. Authorization: key_id is matched together with org_id, so a key owned by another org returns 404 and no other tenant's key can be rotated.

post/orgs/{org_id}/api-keys/{key_id}/rotate

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/orgs/{org_id}/api-keys/{key_id}/rotate
  • Auth: HTTP bearer

Path parameters

org_idstring required

Organization identifier (e.g. org-abc12345)

key_idstring required

Response

New key minted, old key revoked.

key_idstring
keystring

Full secret. Capture now — never returned again.

key_prefixstring
namestring
org_idstring
scopesstring[]
rotated_fromstring
old_key_revoked_atstring date-time
created_atstring date-time

Changes

No recorded changes to this operation across all 1 revision of this API.