---
title: "Rotate client secret"
method: POST
path: "/v1/apps/{id}/rotate-client-secret"
tags: ["Workspace API - Apps"]
---

# Rotate client secret

`POST /v1/apps/{id}/rotate-client-secret`

Generates a new clientSecret for the App. The old secret is immediately invalidated. The new secret is returned exactly once.

## Path parameters

- `id` string, required

## Request body

- object

## Response `201`

New clientSecret generated

- RotateClientSecretResponseDto
  - `clientSecret` string, required — The newly generated clientSecret. Persist immediately; cannot be retrieved later.

## Other responses

- `401` — Invalid API key
- `404` — App not found

---

[API](https://skmtc.net/hopae/apis/hconnect-api.md) · [All operations](https://skmtc.net/hopae/apis/hconnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hopae/hconnect-api/versions/ed6e97ac6f2f/schema)