Rotate a connect module signing secret and callback key

http

POST https://api.onehazel.com/onehazel-api/operators/me/connect/endpoints/{module}/rotate

Rotates the signing secret, the callback key, or both for a registered module. Optional JSON body { "what": "signing_secret" | "callback_key" | "both" }, default both (an empty body means both). Each new value is shown once, with a save_as block naming the adapter and sample environment variables to write it to. The previous value of each rotated one stays accepted for one hour: OneHazel retries a call your endpoint refuses with 401 once with the previous values, so you can update the adapter after the call. A rotated callback key is minted by OneHazel; to use your own, register again with callbackKey. An unknown what answers 400 VALIDATION_ERROR and changes nothing.

Section: Onboarding
Operation id: postOperatorsMeConnectEndpointsByModuleRotate

Authentication

Signed-in session token (Authorization: Bearer <session token>).

Parameters

Name	In	Required	Description
`module`	path	yes

Request body

JSON object.

Responses

200 { "success": true, "data": ... }

Errors return { "success": false, "error": { "code": "...", "message": "..." } } with a 4xx or 5xx status.

Example

bash

curl -X POST "https://api.onehazel.com/onehazel-api/operators/me/connect/endpoints/{module}/rotate" \
  -H "Authorization: Bearer YOUR_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'

Machine-readable: openapi.yaml, openapi.json.

Rotate a connect module signing secret and callback key ​

Authentication ​

Parameters ​

Request body ​