v1

latestOpenAPI 3.1.02026-07-263644911022.4 KB

Exception

Rotate a callback credential

Atomically supersedes a live callback credential with a freshly minted one (same label) and returns the new raw token ONCE. The old credential is revoked in the same transaction.

post/v1/exceptions/callbacks/credentials/{credentialId}/rotate

Path parameters

credentialIdstring uuid required

Id of the live credential to rotate

Example:550e8400-e29b-41d4-a716-446655440000

Id of the live credential to rotate

Response

Created

createdAtstring required

Mint time (RFC 3339, UTC)

credentialIdstring uuid required

Surrogate id of the minted credential

externalSystemstring

Operator-legible external-system label, echoed for confirmation

tokenstring required

Raw bearer token, surfaced exactly once; configure it as the X-Callback-Token header value in the external system. Only its SHA-256 hash is stored server-side.

webhookUrlHintstring

Informational inbound-callback URL shape to configure in the external system. The {exceptionId} placeholder is filled per callback.