---
title: "Rotate a link's password"
method: POST
path: "/api/v1/apps/bindings/{binding_id}/rotate"
tags: ["Raff Apps"]
---

# Rotate a link's password

`POST /api/v1/apps/bindings/{binding_id}/rotate`

## Request

- Base URL: `https://api.rafftechnologies.com`
- URL: `https://api.rafftechnologies.com/api/v1/apps/bindings/{binding_id}/rotate`
- Auth: API key in header `X-API-Key`

Give the link's database user a new password, update the app's
variables and redeploy it. The old password stops working.

## Path parameters

- `binding_id` string, uuid, required

## Response `200`

Rotated

- object
  - `success` boolean
  - `binding` AppBinding: A managed database linked to an app.
    - `id` string, uuid
    - `service_id` string, uuid
    - `binding_type` 'database'
    - `resource_id` string, uuid: The database's ID
    - `resource_name` string
    - `env_prefix` string: Prefix of the variables this link sets (`DATABASE` by default)
    - `injected_keys` string[], nullable
    - `status` 'provisioning' | 'active' | 'rotating' | 'error' | 'deleting'
    - `status_message` string
    - `created_at` string, date-time

## Other responses

- `400`: Invalid request parameters
- `401`: Authentication required
- `404`: Resource not found
- `409`: Conflicts with what exists, for example a name already in use

## Changes

- **2026-10-19** `e80a4b1b5024`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rafftechnologies/apis/raff-api/changes/api/v1/apps/bindings/:binding_id/rotate/post.md)

---

[API](https://skmtc.dev/rafftechnologies/apis/raff-api.md) - [All operations](https://skmtc.dev/rafftechnologies/apis/raff-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rafftechnologies/apis/raff-api/revisions/3d30cde0acb4?raw)