---
title: "GET /api/v2/secret-rotations"
method: GET
path: "/api/v2/secret-rotations"
tags: ["Secret Rotations"]
---

# GET /api/v2/secret-rotations

`GET /api/v2/secret-rotations`

List all the Secret Rotations for the specified project.

## Query parameters

- `projectId` string, required

## Response `200`

Default Response

- object
  - `secretRotations` union[], required
    - union
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'postgres', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'postgres-credentials', required
        - `parameters` object, required
          - `username1` string, required — The username of the first login to rotate passwords for. This user must already exists in your database.
          - `username2` string, required — The username of the second login to rotate passwords for. This user must already exists in your database.
          - `rotationStatement` string — The SQL template query used for rotation.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the active username will be mapped to.
          - `password` string, required — The name of the secret that the generated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'mssql', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'mssql-credentials', required
        - `parameters` object, required
          - `username1` string, required — The username of the first login to rotate passwords for. This user must already exists in your database.
          - `username2` string, required — The username of the second login to rotate passwords for. This user must already exists in your database.
          - `rotationStatement` string — The SQL template query used for rotation.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the active username will be mapped to.
          - `password` string, required — The name of the secret that the generated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'mysql', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'mysql-credentials', required
        - `parameters` object, required
          - `username1` string, required — The username of the first login to rotate passwords for. This user must already exists in your database.
          - `username2` string, required — The username of the second login to rotate passwords for. This user must already exists in your database.
          - `rotationStatement` string — The SQL template query used for rotation.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the active username will be mapped to.
          - `password` string, required — The name of the secret that the generated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'oracledb', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'oracledb-credentials', required
        - `parameters` object, required
          - `username1` string, required — The username of the first login to rotate passwords for. This user must already exists in your database.
          - `username2` string, required — The username of the second login to rotate passwords for. This user must already exists in your database.
          - `rotationStatement` string — The SQL template query used for rotation.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the active username will be mapped to.
          - `password` string, required — The name of the secret that the generated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'auth0', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'auth0-client-secret', required
        - `parameters` object, required
          - `clientId` string, required — The client ID of the Auth0 Application to rotate the client secret for.
        - `secretsMapping` object, required
          - `clientId` string, required — The name of the secret that the client ID will be mapped to.
          - `clientSecret` string, required — The name of the secret that the rotated client secret will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'azure-client-secrets', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'azure-client-secret', required
        - `parameters` object, required
          - `objectId` string, required — The ID of the Azure Application to rotate the client secret for.
          - `appName` string — The name of the Azure Application to rotate the client secret for.
          - `clientId` string, required — The client ID of the Azure Application to rotate the client secret for.
        - `secretsMapping` object, required
          - `clientId` string, required — The name of the secret that the client ID will be mapped to.
          - `clientSecret` string, required — The name of the secret that the rotated client secret will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'ldap', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'ldap-password', required
        - `parameters` object, required
          - `dn` string, required — The Distinguished Name (DN) or User Principal Name (UPN) of the principal to rotate the password for.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
          - `rotationMethod` 'connection-principal' | 'target-principal' — Whether the rotation should be performed by the LDAP "connection-principal" or the "target-principal" (defaults to 'connection-principal').
        - `secretsMapping` object, required
          - `dn` string, required — The name of the secret that the Distinguished Name (DN) or User Principal Name (UPN) of the principal will be mapped to.
          - `password` string, required — The name of the secret that the rotated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'aws', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'aws-iam-user-secret', required
        - `parameters` object, required
          - `userName` string, required — The name of the client to rotate credentials for.
          - `region` 'us-east-1' | 'us-east-2' | 'us-west-1' | 'us-west-2' | 'us-gov-east-1' | 'us-gov-west-1' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-south-2' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-southeast-3' | 'ap-southeast-4' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'eu-south-1' | 'eu-south-2' | 'eu-north-1' | 'me-south-1' | 'me-central-1' | 'sa-east-1' — The AWS region the client is present in.
        - `secretsMapping` object, required
          - `accessKeyId` string, required — The name of the secret that the access key ID will be mapped to.
          - `secretAccessKey` string, required — The name of the secret that the rotated secret access key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'okta', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'okta-client-secret', required
        - `parameters` object, required
          - `clientId` string, required — The ID of the Okta Application to rotate the client secret for.
        - `secretsMapping` object, required
          - `clientId` string, required — The name of the secret that the client ID will be mapped to.
          - `clientSecret` string, required — The name of the secret that the rotated client secret will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'redis', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'redis-credentials', required
        - `parameters` object, required
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
          - `permissionScope` string, required — The ACL permission scope to assign to the issued Redis users.
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the username will be mapped to.
          - `password` string, required — The name of the secret that the rotated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'mongodb', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'mongodb-credentials', required
        - `parameters` object, required
          - `username1` string, required — The username of the first login to rotate passwords for. This user must already exists in your database.
          - `username2` string, required — The username of the second login to rotate passwords for. This user must already exists in your database.
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the active username will be mapped to.
          - `password` string, required — The name of the secret that the generated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'databricks', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'databricks-service-principal-secret', required
        - `parameters` object, required
          - `servicePrincipalId` string, required — The ID of the Databricks Service Principal to rotate the OAuth secret for.
          - `servicePrincipalName` string — The name of the Databricks Service Principal to rotate the OAuth secret for.
          - `clientId` string, required — The client ID of the Databricks Service Principal to rotate the OAuth secret for.
        - `secretsMapping` object, required
          - `clientId` string, required — The name of the secret that the client ID will be mapped to.
          - `clientSecret` string, required — The name of the secret that the rotated OAuth client secret will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'ssh', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'unix-linux-local-account', required
        - `parameters` object, required
          - `username` string, required — The username of the Unix/Linux user account to rotate the password for.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
          - `rotationMethod` 'login-as-target' | 'login-as-root' — Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-target".
          - `useSudo` boolean — If true, uses sudo when executing the password rotation command. Defaults to false.
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the username will be mapped to.
          - `password` string, required — The name of the secret that the rotated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'dbt', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'dbt-service-token', required
        - `parameters` object, required
          - `tokenName` string, required — The name of the service token to create.
          - `permissionGrants` object[], required — The permission grants to apply to the service token.
            - `permissionSet` 'account_admin' | 'account_viewer' | 'admin' | 'analyst' | 'billing_admin' | 'cost_insights_admin' | 'cost_insights_viewer' | 'cost_management_admin' | 'cost_management_viewer' | 'database_admin' | 'developer' | 'fusion_admin' | 'git_admin' | 'job_admin' | 'job_runner' | 'job_viewer' | 'manage_marketplace_apps' | 'member' | 'metadata_only' | 'owner' | 'project_creator' | 'readonly' | 'scim_only' | 'security_admin' | 'semantic_layer_only' | 'stakeholder' | 'team_admin' | 'webhooks_only', required
            - `projectId` number
        - `secretsMapping` object, required
          - `serviceToken` string, required — The name of the secret that the service token will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'smb', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'windows-local-account', required
        - `parameters` object, required
          - `username` string, required — The username of the Windows user account to rotate the password for.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
          - `rotationMethod` 'login-as-target' | 'login-as-root' — Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-target".
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the username will be mapped to.
          - `password` string, required — The name of the secret that the rotated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'open-router', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'open-router-api-key', required
        - `parameters` object, required
          - `name` string, required — The name for the generated OpenRouter API key.
          - `limit` number, nullable — The optional spending limit in USD for the generated API key.
          - `limitReset` 'daily' | 'weekly' | 'monthly', nullable — The type of limit reset for the API key (daily, weekly, monthly, or null for no reset).
          - `includeByokInLimit` boolean, nullable — Whether to include BYOK (Bring Your Own Key) usage in the spending limit. When enabled, usage from your own provider keys counts toward this key's limit. See OpenRouter BYOK docs for details.
        - `secretsMapping` object, required
          - `apiKey` string, required — The name of the secret that the rotated OpenRouter API key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'litellm', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'litellm-api-key', required
        - `parameters` object, required
          - `name` string, required — The name for the generated LiteLLM API key. Infisical appends a timestamp to keep each rotated key unique and record its creation time.
          - `additionalOptions` string — A JSON object of additional LiteLLM /key/generate options (e.g. max_budget, tpm_limit, metadata). Reserved fields (key_alias, auto_rotate, rotation_interval, duration, send_invite_email, key_type, user_id, team_id, models) are managed by Infisical or set via dedicated fields and cannot be set here.
          - `userId` string — The ID of the LiteLLM user to associate the generated key with.
          - `teamId` string — The ID of the LiteLLM team to associate the generated key with.
          - `models` string[] — The list of model names the generated key is allowed to access. An empty list allows all models.
        - `secretsMapping` object, required
          - `apiKey` string, required — The name of the secret that the rotated LiteLLM API key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'openai', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'openai-service-account', required
        - `parameters` object, required
          - `projectId` string, required — The ID of the OpenAI project to create service accounts in.
          - `name` string, required — The name for the generated OpenAI service account.
        - `secretsMapping` object, required
          - `apiKey` string, required — The name of the secret that the rotated OpenAI service account API key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'ssh', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'hp-ilo-local-account', required
        - `parameters` object, required
          - `username` string, required — The username of the HP iLO account to rotate the password for.
          - `passwordRequirements` object — The password requirements to use when generating the new password.
            - `length` number, required — The length of the password to generate.
            - `required` object, required
              - …
            - `allowedSymbols` string — The allowed symbols to use in the generated password (defaults to "-_.~!*").
          - `rotationMethod` 'login-as-target' | 'login-as-root' — Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-root".
        - `secretsMapping` object, required
          - `username` string, required — The name of the secret that the username will be mapped to.
          - `password` string, required — The name of the secret that the rotated password will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'supabase', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'supabase-api-key', required
        - `parameters` object, required
          - `projectRef` string, required — The reference ID of the Supabase project to rotate the API key for.
          - `keyType` 'publishable' | 'secret', required — The type of the API key to rotate (e.g. publishable, secret).
        - `secretsMapping` object, required
          - `apiKey` string, required — The name of the secret that the rotated Supabase API key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'salesforce', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'salesforce-oauth-credentials', required
        - `parameters` object, required
          - `appId` string, required — The identifier of the Salesforce External Client App to rotate the consumer secret for.
          - `appName` string, required — The developer name of the Salesforce External Client App to rotate the consumer secret for.
        - `secretsMapping` object, required
          - `consumerKey` string, required — The name of the secret that the rotated Salesforce consumer key will be mapped to.
          - `consumerSecret` string, required — The name of the secret that the rotated Salesforce consumer secret will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'datadog', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'datadog-application-key-secret', required
        - `parameters` object, required
          - `serviceAccountId` string, required — The ID of the Datadog service account to rotate the application key for.
        - `secretsMapping` object, required
          - `applicationKeyId` string, required — The name of the secret that the rotated Datadog application key ID will be mapped to.
          - `applicationKey` string, required — The name of the secret that the rotated Datadog application key value will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'datadog', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'datadog-api-key', required
        - `parameters` object, required
          - `name` string, required — The name for the generated Datadog API key.
        - `secretsMapping` object, required
          - `apiKeyId` string, required — The name of the secret that the rotated Datadog API key ID will be mapped to.
          - `apiKey` string, required — The name of the secret that the rotated Datadog API key value will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'convex', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'convex-access-key', required
        - `parameters` object, required
          - `namePrefix` string, required — A prefix to use when naming the generated Convex access key.
        - `secretsMapping` object, required
          - `accessKey` string, required — The name of the secret that the rotated Convex access key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'fireworks', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'fireworks-api-key', required
        - `parameters` object, required
          - `serviceAccountUserId` string, required — The user ID of the Fireworks service account to create the API key for.
        - `secretsMapping` object, required
          - `apiKey` string, required — The name of the secret that the rotated Fireworks API key will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'snowflake', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'snowflake-user-key-pair', required
        - `parameters` object, required
          - `username` string, required — The Snowflake user whose RSA key pair will be rotated. If the user does not exist, it is created as a key-pair-only SERVICE user.
          - `modulusLength` union — The modulus length in bits of the generated RSA key pairs. Defaults to 2048.
            - 2048
            - 4096
        - `secretsMapping` object, required
          - `privateKey` string, required — The name of the secret that the generated RSA private key (PKCS#8 PEM) will be mapped to.
          - `publicKey` string, required — The name of the secret that the generated RSA public key (SPKI PEM) will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'cloudflare', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'cloudflare-api-token', required
        - `parameters` object, required
          - `name` string, required — The name for the generated Cloudflare API token.
          - `policies` object[], required — The access policies to attach to the generated Cloudflare API token. Each policy scopes a set of permission groups to the entire account, to all zones in the account, or to a specific set of zones.
            - `effect` 'allow' | 'deny', required
            - `scope` 'account' | 'all-zones' | 'zones', required
            - `zoneIds` string[]
            - `permissionGroupIds` string[], required
          - `allowedIps` string[] — The IP addresses or CIDR blocks the generated Cloudflare API token is restricted to.
          - `disallowedIps` string[] — The IP addresses or CIDR blocks the generated Cloudflare API token is denied from.
        - `secretsMapping` object, required
          - `tokenId` string, required — The name of the secret that the rotated Cloudflare API token ID will be mapped to.
          - `apiToken` string, required — The name of the secret that the rotated Cloudflare API token value will be mapped to.
      - object
        - `id` string, uuid, required
        - `name` string, required
        - `description` string, nullable
        - `isAutoRotationEnabled` boolean
        - `activeIndex` number
        - `folderId` string, uuid, required
        - `connectionId` string, uuid, required
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `rotationInterval` number, required
        - `rotationStatus` string, required
        - `lastRotationAttemptedAt` string, date-time, required
        - `lastRotatedAt` string, date-time, required
        - `lastRotationJobId` string, nullable
        - `nextRotationAt` string, date-time, nullable
        - `isLastRotationManual` boolean
        - `connection` object, required
          - `app` 'cloudflare', required
          - `name` string, required
          - `id` string, uuid, required
        - `environment` object, required
          - `slug` string, required
          - `name` string, required
          - `id` string, uuid, required
        - `projectId` string, required
        - `folder` object, required
          - `id` string, required
          - `path` string, required
        - `rotateAtUtc` object, required
          - `hours` number, required
          - `minutes` number, required
        - `lastRotationMessage` string, nullable
        - `type` 'cloudflare-r2-access-key', required
        - `parameters` object, required
          - `name` string, required — The name for the generated Cloudflare API token that backs the R2 access key.
          - `buckets` object[], required — The R2 buckets the generated access key is scoped to. Each entry is a bucket name plus its jurisdiction (default, eu, or fedramp).
            - `name` string, required
            - `jurisdiction` 'default' | 'eu' | 'fedramp'
          - `accessLevel` 'object-read' | 'object-read-write' — The level of access the generated key has over the selected buckets (object-read for read and list, object-read-write to also write).
          - `allowedIps` string[] — The IP addresses or CIDR blocks the generated R2 access key is restricted to.
          - `disallowedIps` string[] — The IP addresses or CIDR blocks the generated R2 access key is denied from.
        - `secretsMapping` object, required
          - `accessKeyId` string, required — The name of the secret that the rotated R2 access key ID will be mapped to.
          - `secretAccessKey` string, required — The name of the secret that the rotated R2 secret access key will be mapped to.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)