API Access
Rotating an API Key
Replace an API key's secret without downtime using a grace window
Rotation lets you replace a key's secret without downtime. During a grace window, both the old and new secrets are accepted - so you can roll the new secret out to your services before the old one stops working.
How to Rotate
Click Rotate on a key row.
Choose a grace window - how long the previous secret keeps working.
Confirm. The new secret is shown once - copy it now.
Update your integrations to use the new secret.
When the grace window ends, the old secret stops working automatically.
While a Key Is Rotating
- The key shows a Rotating badge and the previous secret's expiry time.
- If you try to rotate again while a grace window is still active, you'll be warned first - the in-flight previous secret would be dropped.
Rotate a key whenever a secret may have been exposed, or on a regular schedule as good hygiene. There's no downtime as long as you update your services before the grace window ends.