---
title: "Regenerate project secret key"
method: POST
path: "/project-settings/regenerate-secret"
tags: ["Project Settings"]
---

# Regenerate project secret key

`POST /project-settings/regenerate-secret`

Regenerates the project's secret key. The old key is revoked; clients may see a short grace period (seconds) while internal caches expire.
This is a destructive operation.

Idempotency is intentionally NOT supported: caching a newly generated
secret in a shared replay cache would leak credentials. Each call
produces a fresh secret — clients must treat every request as unique.

## Response `200`

Regenerated secret key.

- V4RegenerateSecretResponse
  - `object` 'project_settings', required
  - `url` string, required
  - `secret_key` string, required — Newly regenerated secret key.

## Other responses

- `401` — Unauthorized
- `403` — Insufficient permissions
- `404` — Project not found
- `429` — Rate limit exceeded.
- `500` — Internal error
- `502` — Upstream service failure
- `504` — Upstream timeout

---

[API](https://skmtc.net/qonversion/apis/qonversion-rest-api-v4.md) · [All operations](https://skmtc.net/qonversion/apis/qonversion-rest-api-v4/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/qonversion/qonversion-rest-api-v4/versions/e3f72cf8951c/schema)