Rotate API token

Revoke an existing token and create a new one with the same name and scopes. The new token secret is returned only once — store it securely. The old token is immediately invalidated.

POST /v1/api-tokens/{id}/rotate

Rotate API token

cURL

curl --request POST \
  --url http://co-mind-platform-host/v1/api-tokens/{id}/rotate \
  --header 'Authorization: Bearer <token>'

200

{
  "token": "cmnd_abc123.sk_xxxxxxxxxxxxxxxxxxxx",
  "id": "abc123",
  "name": "CI/CD Pipeline Token",
  "scopes": [
    "chat:write",
    "models:read",
    "knowledgebases:read"
  ],
  "created_at": "2023-11-07T05:31:56Z",
  "expires_at": "2023-11-07T05:31:56Z"
}

Authorizations

Authorization · string · header · required

Bearer token authentication. Supports two token types:

• JWT Access Token — obtained via POST /v1/auth/login
• Personal Access Token (PAT) — created via POST /v1/api-tokens, format: cmnd_<tokenId>.<secret>

Path Parameters

id · string · required

The token ID to rotate

Response

200

application/json

Token rotated successfully

token · string

The token secret (shown only once). Format: cmnd_.

Example:

"cmnd_abc123.sk_xxxxxxxxxxxxxxxxxxxx"

id · string

Example:

"abc123"

name · string

Example:

"CI/CD Pipeline Token"

scopes · string[]

Example:

[
  "chat:write",
  "models:read",
  "knowledgebases:read"
]

created_at · string<date-time>

expires_at · string<date-time>