---
title: "Changes to Rotate a credential's key + secret (public API)"
method: POST
path: "/projects/{project}/api-credentials/{cred}/rotate"
---

# Changes to Rotate a credential's key + secret (public API)

`POST /projects/{project}/api-credentials/{cred}/rotate`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 1 of 11 revisions.

- **2026-10-26** `2e3492ef654f`: 1 breaking, 2 info

## Changes

- **2026-10-26** `2e3492ef654f`: 1 breaking, 2 info
  - response property `apiSecret` list-of-types was widened by adding types `null` to media type `application/json` of response `200`
  - added the required property `revokedAt` to the response with the `200` status
  - added the required property `secretLast4` to the response with the `200` status

---

[Operation](https://skmtc.dev/urlbox/apis/urlbox-public-api-spike/docs/projects/:project/api-credentials/:cred/rotate/post.md) - [API](https://skmtc.dev/urlbox/apis/urlbox-public-api-spike.md) - [Page](https://skmtc.dev/urlbox/apis/urlbox-public-api-spike/changes/projects/:project/api-credentials/:cred/rotate/post)