---
title: "Rotate binding credentials"
method: POST
path: "/api/v1/functions/{function_id}/bindings/{binding_id}/rotate"
tags: ["Functions"]
---

# Rotate binding credentials

`POST /api/v1/functions/{function_id}/bindings/{binding_id}/rotate`

Mints a fresh credential and refreshes the injected env vars; the old
credential stops working immediately. Zero-downtime redeploy.

## Path parameters

- `function_id` string, required
- `binding_id` string, uuid, required

## Response `200`

Rotated

- object
  - `success` boolean
  - `data` object
    - `binding` FunctionBinding
      - `id` string, uuid
      - `binding_type` 'database' | 'bucket'
      - `resource_id` string, uuid
      - `resource_name` string
      - `env_prefix` string
      - `injected_keys` string[]
      - `status` 'provisioning' | 'active' | 'rotating' | 'error' | 'deleting'
      - `status_message` string
      - `created_at` string, date-time

## Other responses

- `401` — Authentication required
- `404` — Resource not found

---

[API](https://skmtc.dev/rafftechnologies/apis/raff-api.md) · [All operations](https://skmtc.dev/rafftechnologies/apis/raff-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rafftechnologies/raff-api/revisions/2f4df56be77c/schema)