Skip to main content
POST
Rotate the authenticated agent credential

Authorizations

Authorization
string
header
required

Opaque AMS agent access token or workspace API key. Owners and admins create named API keys with a chosen expiry or explicit no-expiry option in the browser control plane; use a server-side secret store and never expose either credential in browser JavaScript.

Headers

Idempotency-Key
string
required

Stable caller-generated key for one logical write. Reuse it only when retrying identical input.

Required string length: 1 - 200

Response

A new credential returned exactly in this response.

access_token
string
required

The replacement credential. Treat this response as secret.

token_type
string
required
Allowed value: "Bearer"
expires_at
string<date-time>
required