---
title: "Rotate Block Polaris Credentials"
method: POST
path: "/api/v1/block/polaris/rotate-credentials"
tags: ["User APIs", "block-data"]
---

# Rotate Block Polaris Credentials

`POST /api/v1/block/polaris/rotate-credentials`

Rotate the caller's Polaris client credentials.

Mints a fresh client_id/secret for the client's existing Polaris
principal, persists it (the secret lands in the encrypted column), and
returns the new pair. The previous credentials are invalidated
server-side, so this is the caller's only chance to capture the new
secret. Exposed to the carbonarc SDK as
``client.block.rotate_polaris_credentials``.

Gated like the "Connect Your Query Engine" credential read (Enterprise +
any Block role). The rotation is stamped on the client row (attributed to
the caller) so it surfaces in the CAMS Client Management Block section.

## Response `200`

Successful Response

- BlockRotatedCredentials — Freshly-rotated Polaris client credentials returned to the carbonarc SDK's ``block.rotate_polaris_credentials``. The previous pair is invalid server-side the moment this returns, so the plaintext ``client_secret`` is the caller's only chance to capture the new value.
  - `principal_name` string, nullable
  - `client_id` string, required
  - `client_secret` string, required

---

[API](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api.md) · [All operations](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/carbonarc/carbon-arc-client-admin-api/revisions/a8ca30023371/schema)