Skip to main content

Regenerate Key

POST 
/auth/regenerate-key

Regenerate the user's API key.

Atomically revokes the old key and creates a new one. Returns the new raw key ONCE - it will never be retrievable again. Does not reset the daily usage counter: the quota bucket is keyed on the user, not on this key row.

⚠ That is now true. It was not when this line was first written - the Valkey buckets were keyed on api_keys.id, this endpoint INSERTs a row with a new id, and every counter therefore read zero afterwards. The sentence described the slowapi limiter, which is genuinely user-keyed, and was false of the buckets carrying the published per-endpoint limits. See core.rate_limit.quota_identity. Requires Authorization: Bearer access_token header.

Responses​

Successful Response