---
title: "Publisher Rotate Access Token"
method: POST
path: "/v1/publisher/{tenant_slug}/access-token/rotate"
---

# Publisher Rotate Access Token

`POST /v1/publisher/{tenant_slug}/access-token/rotate`

## Request

- Base URL: `https://api.storyflo.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.storyflo.com/v1/publisher/{tenant_slug}/access-token/rotate`
- Auth: none declared

Self-serve token rotation. Authenticates with the CURRENT token
via the existing publisher header, then mints a fresh 64-hex token
and persists `access_token_minted_at`. The old token is invalidated
the moment this commits. Rate-limited at 1/minute + 5/hour per IP
so a compromised token can't be brute-rolled.

## Path parameters

- `tenant_slug` string, required

## Headers

- `x-storyflo-publisher-token` string, nullable

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/storyflo/apis/storyflo-inference-router.md) · [All operations](https://skmtc.dev/storyflo/apis/storyflo-inference-router/llms.txt) · [OpenAPI document](https://skmtc.dev/storyflo/apis/storyflo-inference-router/revisions/c3a1a735ac7a?raw)