api_keys

Rotate an API key

Replaces an API key's secret and returns the new one once.

  • The old secret stops working at once. The key keeps its ID, permissions, expiry and running jobs.
  • You can rotate only a key whose permissions you hold.
  • With deliver "dashboard", nothing changes yet: this returns a Dashboard link where the person rotates the key and sees the new secret.
post/v1/api-keys/{id}/rotate

Request

  • Base URL: https://api.pomerado.ai
  • URL: https://api.pomerado.ai/v1/api-keys/{id}/rotate
  • Auth: HTTP bearer

Path parameters

idstring required
Example:key_0f8e2d1c4b3a49e8a7f6e5d4c3b2a190

an API key ID: key_ and 32 lowercase hex digits

Request body

deliver'dashboard'

Return a Dashboard link instead of the secret, so the secret never reaches this client

Response

The key and its new one-time secret; With deliver dashboard: where to finish

OR

Example response

{
  "id": "key_0f8e2d1c4b3a49e8a7f6e5d4c3b2a190",
  "name": "Nightly price check",
  "permissions": [
    "tools:read",
    "runs:create",
    "jobs:read"
  ],
  "integration_id": "int_0f8e2d1c4b3a49e8a7f6e5d4c3b2a190",
  "prefix": "pom_0f8e2d1c",
  "created_at": "2026-10-05T18:30:00.000Z",
  "expires_at": "2026-10-05T18:30:00.000Z",
  "last_used_at": "2026-10-05T18:30:00.000Z",
  "secret": "pom_0f8e2d1c4b3a49e8a7f6e5d4c3b2a190_example-secret-not-a-real-key-0000000000000"
}

Changes

No recorded changes to this operation across all 1 revision of this API.