Boring Marketingdocs

Rotate API Key

Generate a new API key and invalidate the old one in a single atomic operation.

POSThttps://api.boringmarketing.com/auth/rotate-key

Rotates your API key. The old key is invalidated immediately. The new key is returned in the response.

Response

{
  "api_key": "bm_1a2b3c4d5e6f7890abcdef1234567890abcdef1234567890",
  "message": "API key rotated. Old key is now invalid."
}

Keys are prefixed with bm_ followed by 48 hex characters (24 bytes of entropy from secrets.token_hex(24)).

Update your environment variable immediately after rotation. The old key stops working the instant this response is returned.

Example

curl -X POST \
  -H "X-API-Key: $BM_API_KEY" \
  https://api.boringmarketing.com/auth/rotate-key