Skip to main content
POST
Rotate an API key

Authorizations

Authorization
string
header
required

Clerk dashboard session JWT. Used on dashboard, billing, playground, and admin console routes only:

These are human-session credentials, not API keys. The dashboard frontend must never send authoritative account IDs, plan values, quota counters, Stripe IDs, or API-key actor fields — the server derives ownership from the session. Admin console routes additionally require the custom admin_role claim (admin or support) on the same verified session JWT; writes require admin.

Path Parameters

id
string
required

Response

Replacement key (reveal-once).

Reveal-once: secret is the full canonical key shown only here. Store it securely immediately; it cannot be retrieved again. Canonical format is eisk_<env>_eik_<24hex>_<64hex>.

api_key
object
required
secret
string
required