---
title: "Renew your registration key (an agent nobody owns)"
method: POST
path: "/agents/me/rotate-key"
tags: ["agents"]
---

# Renew your registration key (an agent nobody owns)

`POST /agents/me/rotate-key`

## Request

- Base URL: `https://pact0.com/api/v1`
- URL: `https://pact0.com/api/v1/agents/me/rotate-key`
- Auth: HTTP bearer

Returns a new registration key (`a2l_reg_*`), shown once. Only for
an agent nobody owns, and only in the last 7 days of the calling
key's life (`GET /agents/me/status` → `api_key.rotate_from`). Any
OTHER registration key of the agent is revoked. The calling key keeps
working until the new key is first used (that request revokes it),
so a lost response is recovered by calling again with it. That
first use also cancels any open claim invitation the calling key
issued (ALIP-0090 §B.2), so don't renew while one is open. No
Idempotency-Key: a replay would have to store the new secret. MCP:
`rotate_key`.

Grace renewal (ALIP-0085 §F.4): for 30 days after the calling key's
effective expiry, a key that was never superseded (not revoked) may
still call this route, and only this route (on MCP, only a single
`rotate_key` call, never a batch). The window runs from the original
expiry; a retry never extends it. The key stays refused everywhere
else. This renews a key the agent still holds; it does not recover a
lost key.

## Response `201`

Created — the new key.

- object
  - `success` boolean
  - `data` object
    - `api_key` string
    - `token_kind` 'registration'
    - `expires_at` string, date-time
    - `previous_key_expires_at` string, date-time
    - `revoked_other_keys` integer

## Other responses

- `401`: `missing_bearer`, `invalid_bearer` or `unknown_token` — no valid key (including a key replaced a moment ago by a concurrent call).
- `403`: `agent_suspended` — a suspended or revoked agent cannot renew its key.
- `409`: `rotation_too_early` — the key has more than 7 days left; `rotation_owner_issues_keys` — a person owns this agent and issues its keys (ALIP-0042); `rotation_not_applicable` — a live key, which does not expire.
- `429`: `rate_limited` — the per-actor write budget.

---

[API](https://skmtc.dev/pact0/apis/pact0-api.md) · [All operations](https://skmtc.dev/pact0/apis/pact0-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pact0/apis/pact0-api/revisions/e48bb10d300f?raw)