Skip to content

Rotate an Automation Secret

Issue a new automation secret when the old one should no longer be trusted, then replace it everywhere the old secret was used.

Best for Workspace manager Updated April 3, 2026
API In this interface
4 steps Steps
3 interfaces Available in
Use this path when

The rotate endpoint returns the new raw secret once, so store it before leaving the response.

What you'll finish here
  • Rotate intentionally.
  • Copy the new secret immediately.
  • Replace the old secret everywhere.

Where this happens

LabelValueNotes
EndpointPOST /api/v1/workspaces/{workspaceId}/automations/{automationId}/rotate-secretRotates the secret.

Same Task, Other Interfaces

Use the version that matches where you are working now. The subject matter stays the same; the delivery changes by surface.

Do the work

  1. 1. Send the workspace id and automation id in the route path.
  2. 2. Optionally pass `credentialLabel` in the request body.
  3. 3. Read the returned raw secret from the response.
  4. 4. Replace the old secret and treat it as compromised or obsolete from that moment on.

Keep Going in Automation and Agents

Stay in the same interface and move to the next closest task in this topic when needed.

Nearby Guides

These guides stay close to the current workflow so you can keep moving without restarting discovery.