Skip to content

Rotate the inbound secret

POST
/accounts/{accountId}/connections/{connectionId}/rotate

Issues a new inbound secret (and optionally a new inboundKey). During the rotation window both old and new secrets verify, so callers see no gap.

accountId
required
string
connectionId
required
string

Opaque connection id (conn_…).

Rotated. Returns the new secret (shown once) and the window end.

object
inboundSecret
string
rotatesAt
string format: date-time

Missing or invalid authentication/signature.

object
error
object
code
string
invalid_signature
message
string
requestId
string

Resource not found.

object
error
object
code
string
invalid_signature
message
string
requestId
string
Was this page helpful? Tell us / report an issue ↗