Authentication
MCP
Rotate a scoped Agent Connection credential
Immediately invalidates the prior lcac_ credential and returns its spend-capable replacement once. Callers require credentials:manage and credits:move; a scoped secret key with both may automate this operation, while human callers additionally require owner/admin step-up.
post/credits/agent-connections/{connectionId}/rotate
Request
- Base URLhttps://api.paywithlocus.com/api
- URLhttps://api.paywithlocus.com/api/credits/agent-connections/{connectionId}/rotate
- Auth
- HTTP bearer
- or HTTP bearer
Path parameters
connectionIdstring uuid required
Headers
X-Locus-Step-Upstring password
Short-lived raw MFA/passkey step-up token bound to the authenticated Cognito subject. Send it alongside the dashboard Bearer token for workspace-administrator mutations when the base session does not itself prove MFA within the last ten minutes. Never send it with a tenant secret key.
Response
Credential rotated and returned once
Changes
No recorded changes to this operation across all 1 revision of this API.