---
title: "Rotate provider API key"
method: POST
path: "/api/ai/{provider}/api-key/rotate"
tags: ["Admin"]
---

# Rotate provider API key

`POST /api/ai/{provider}/api-key/rotate`

Rotate the active provider API key for cloud-managed Model Gateway credentials. Currently only `openrouter` is supported.

## Path parameters

- `provider` 'openrouter', required

## Response `200`

API key rotated successfully

- OpenRouterKeyResponse
  - `apiKey` string — Active OpenRouter API key for admin copy workflows
  - `maskedKey` string — Masked OpenRouter API key for display

## Other responses

- `400` — Unsupported provider
- `401` — Unauthorized
- `500` — Failed to rotate API key

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)