Skip to main content
POST
Rotate API Key

Overview

If your API key is compromised or you want to rotate it as a security practice, this endpoint generates a fresh key and immediately deactivates the old one.
Update all your services before you rotate. The old key stops working the instant you call this endpoint — there is no grace period.

Request

string
required
Your current Aether Citadel API key (ack_live_...). This key will be invalidated.
No request body required.

Response

string
Your new API key. Update all environments that use the old key.
string
Confirmation message reminding you to update your integration.

Example


Rotation Checklist

After rotating your key, update it in:
  • Server environment variables (.env, Kubernetes secrets, etc.)
  • CI/CD pipeline secrets
  • Any queued jobs or scheduled tasks that use the key
  • Partner integrations that call Citadel on your behalf

Error Responses