Skip to main content
POST
Rotate a personal API key

Authorizations

Authorization
string
header
required

Supabase JWT token in Authorization: Bearer header

Path Parameters

key_id
string
required

Response

New key minted, old key revoked.

key_id
string
key
string

Full secret. Capture now — never returned again.

key_prefix
string
name
string
scopes
string[]
rotated_from
string

key_id of the now-revoked predecessor

old_key_revoked_at
string<date-time>
created_at
string<date-time>