---
title: "Agent Rotate"
method: POST
path: "/agent/rotate"
tags: ["hub"]
---

# Agent Rotate

`POST /agent/rotate`

## Request

- Base URL: `https://mcp.sentinelx.app` (the document declares no server; this is the origin it was published from)
- URL: `https://mcp.sentinelx.app/agent/rotate`
- Auth: none declared

Exchange a current, valid host credential for a fresh one.

The agent calls this past the half-life of its own credential. The new jti
becomes current (the old one stays valid as `previous` for one more
rotation, so a lagging reconnect on the old credential is not rejected),
which is what makes a stolen copy stop working at the next rotation.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/sentinelx/apis/sentinelx-hub.md) · [All operations](https://skmtc.dev/sentinelx/apis/sentinelx-hub/llms.txt) · [OpenAPI document](https://skmtc.dev/sentinelx/apis/sentinelx-hub/revisions/d1f84924795e?raw)