Skip to main content
POST
Rotate or recover one runtime-agent credential

Authorizations

Authorization
string
header
required

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Headers

Idempotency-Key
string
required
Required string length: 8 - 256
Pattern: ^[\x21-\x7e]+$

Path Parameters

id
string
required

Resource ID

Body

application/json
expected_credential_generation
integer<int64>
required

Exact active generation that this request is authorized to replace.

Required range: x >= 0

Response

Credential rotated or exact rotation replay returned

data
object

Response payload

meta
object