> ## Documentation Index
> Fetch the complete documentation index at: https://langwatch.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate virtual key secret

> Mints a fresh secret for an existing VK. The old secret remains valid for 24h (grace window) so in-flight clients can roll over.



## OpenAPI

````yaml POST /api/gateway/v1/virtual-keys/{id}/rotate
openapi: 3.1.0
info:
  title: LangWatch API
  version: 1.0.0
  description: LangWatch openapi spec
servers:
  - url: https://app.langwatch.ai
security:
  - project_api_key: []
paths:
  /api/gateway/v1/virtual-keys/{id}/rotate:
    post:
      tags:
        - Virtual Keys
      summary: Rotate virtual key secret
      description: >-
        Mints a fresh secret for an existing VK. The old secret remains valid
        for 24h (grace window) so in-flight clients can roll over.
      operationId: postApiGatewayV1Virtual-keysByIdRotate
      parameters:
        - schema:
            type: string
          in: path
          name: id
          required: true
      responses:
        '200':
          description: Rotated
          content:
            application/json:
              schema:
                type: object
                properties:
                  virtual_key:
                    type: object
                    properties:
                      id:
                        type: string
                      display_prefix:
                        type: string
                      name:
                        type: string
                      description:
                        type:
                          - string
                          - 'null'
                      environment:
                        type: string
                        enum:
                          - live
                          - test
                      status:
                        type: string
                        enum:
                          - active
                          - revoked
                      principal_user_id:
                        type:
                          - string
                          - 'null'
                      provider_credential_ids:
                        type: array
                        items:
                          type: string
                      revision:
                        type: string
                      last_used_at:
                        type:
                          - string
                          - 'null'
                      created_at:
                        type: string
                    required:
                      - id
                      - display_prefix
                      - name
                      - description
                      - environment
                      - status
                      - principal_user_id
                      - provider_credential_ids
                      - revision
                      - last_used_at
                      - created_at
                  secret:
                    type: string
                required:
                  - virtual_key
                  - secret
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  message:
                    type: string
                required:
                  - error
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  message:
                    type: string
                required:
                  - error
        '422':
          description: Unprocessable Entity
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  message:
                    type: string
                required:
                  - error
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  message:
                    type: string
                required:
                  - error
components:
  securitySchemes:
    project_api_key:
      type: apiKey
      in: header
      name: X-Auth-Token
      description: >-
        Project API key for sending traces and accessing project-scoped
        resources. Format: sk-lw-... (no underscore). Obtain one by creating a
        project via the Admin API or the LangWatch UI.

````