auth
Generate or rotate the API key
Generates a fresh API key, replacing any existing one. The returned key is shown only once; store it immediately.
Even when the request is authenticated via API key (Bearer), the admin password must be supplied in the request body to prevent a leaked key from rotating itself. The password check is skipped when the server is started with --disable-auth.
post/auth/apikey
Request body
Response
Success
Example response
{
"key": "evcc_aB3xYz7k0Pq2sN5mWtR4"
}