marketplace

Rotate Installation Credential

Changed on

Issues a replacement access token for an installation, so a partner can rotate a credential it believes is compromised without the customer having to reinstall. Authenticated by the credential being replaced plus the integration's client secret: a leaked access token on its own cannot rotate itself, which would otherwise let an attacker take over the installation and lock the partner out. The previous credential intentionally stays valid so in-flight requests keep working. Retiring it is a separate, explicit operation — a partner is never left mid-rotation without a working credential.

post/v1/installations/{integrationConfigurationId}/credentials/rotate

Request

  • Base URL: https://api.vercel.com
  • URL: https://api.vercel.com/v1/installations/{integrationConfigurationId}/credentials/rotate
  • Auth: HTTP bearer

Path parameters

integrationConfigurationIdstring required

Request body

client_secretstring required
client_idstring

Response

access_tokenstring required
expires_innumber required
scopestring required
token_type'oauth2-token' required

Changes