---
title: "Replace the signing secret; URLs signed with the old one stop working"
method: POST
path: "/v1/keys/signing-secret/rotate"
---

# Replace the signing secret; URLs signed with the old one stop working

`POST /v1/keys/signing-secret/rotate`

## Request

- Base URL: `https://shotkiln.com`
- URL: `https://shotkiln.com/v1/keys/signing-secret/rotate`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer

## Response `200`

{ kid, signing_secret }

## Other responses

- `401`: Invalid or revoked API key

## Changes

- **2026-10-20** `8123a05b6719`: 2 info
  - the endpoint scheme security `ApiKeyHeader` was added to the API
  - the endpoint scheme security `Bearer` was added to the API

[Operation history](https://skmtc.dev/shotkiln/apis/shotkiln-api/changes/v1/keys/signing-secret/rotate/post.md)

---

[API](https://skmtc.dev/shotkiln/apis/shotkiln-api.md) · [All operations](https://skmtc.dev/shotkiln/apis/shotkiln-api/llms.txt) · [OpenAPI document](https://skmtc.dev/shotkiln/apis/shotkiln-api/revisions/8123a05b6719?raw)