# Rotate a connect module signing secret and callback key ```http POST https://api.onehazel.com/onehazel-api/operators/me/connect/endpoints/{module}/rotate ``` Rotates the signing secret, the callback key, or both for a registered module. Optional JSON body `{ "what": "signing_secret" | "callback_key" | "both" }`, default `both` (an empty body means both). Each new value is shown once, with a `save_as` block naming the adapter and sample environment variables to write it to. The previous value of each rotated one stays accepted for one hour: OneHazel retries a call your endpoint refuses with 401 once with the previous values, so you can update the adapter after the call. A rotated callback key is minted by OneHazel; to use your own, register again with `callbackKey`. An unknown `what` answers 400 VALIDATION_ERROR and changes nothing. Section: [Onboarding](./) Operation id: `postOperatorsMeConnectEndpointsByModuleRotate` ## Authentication Signed-in session token (`Authorization: Bearer `). ## Parameters | Name | In | Required | Description | |---|---|---|---| | `module` | path | yes | | ## Request body JSON object. ## Responses `200` `{ "success": true, "data": ... }` Errors return `{ "success": false, "error": { "code": "...", "message": "..." } }` with a 4xx or 5xx status. ## Example ```bash curl -X POST "https://api.onehazel.com/onehazel-api/operators/me/connect/endpoints/{module}/rotate" \ -H "Authorization: Bearer YOUR_SESSION_TOKEN" \ -H "Content-Type: application/json" \ -d '{}' ``` Machine-readable: [openapi.yaml](/openapi.yaml), [openapi.json](/openapi.json).