Skip to main content
POST
Rotate Access Token

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

access_token_id
string<uuid>
required

The token's id.

Example:

"546c65d6-e589-4d3c-b1fe-7e61711cc418"

Body

application/json

A new expiry for the token. Without one, the token keeps the expiry it has.

expires_at
string

When the token should expire, as an RFC 3339 timestamp or a YYYY-MM-DD date. A date is read as midnight UTC.

The expiry must be at least 24 hours and at most 365 days from now.

Example:

"2027-10-31T11:19:13.400498Z"

Response

RotateAccessToken 200 response

A System Access Token together with its credential. Only creating a token and rotating its credential return one.

access_token
string
required

The credential, base64-encoded. Send it as Authorization: Bearer <access_token>. It is not stored in a form that can be read back, so no later response repeats it.

expires_at
string<date-time>
required

When the token expires.

id
string<uuid>
required

The token's id.

Example:

"546c65d6-e589-4d3c-b1fe-7e61711cc418"

name
string
required

The token's name.

permissions
object[]
required

The permissions granted to the token.