v1

latestOpenAPI 3.0.3Apache 2.02026-07-2685172326.0 KB
Service Accounts

Rotate a service account's OAuth client secret

Rotate a service account's OAuth client secret; the previous secret and its tokens are revoked within seconds and the new secret is returned only once.

post/admin/service-accounts/{service_account_id}/rotate-secret

Path parameters

service_account_idstring uuid required

The unique identifier of the service account.

Headers

X-Pinecone-Api-Versionstring required

Required date-based version header

Response

Secret rotated successfully. The new client_secret is in the response body and is returned exactly once. Repeating the request rotates again and invalidates the previously returned secret.

client_secretstring required

The OAuth client secret. Returned exactly once. Treat this value as a credential — store it securely and never log it.

Example response

{
  "client_secret": "8p-kkC23XOWvkCosKq-BOn3G74qp__rBcDMxc82iB4gfzRvuhSCRBKM7C5Q7TAzj",
  "service_account": {
    "client_id": "l3Ow0CmFyc4jOONcwiKUCRqQKN0tiCAn",
    "created_at": "2026-04-10T15:23:00.000Z",
    "id": "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
    "name": "My Service Account",
    "updated_at": "2026-04-10T15:23:00.000Z"
  }
}