Skip to main content
POST
Rotate Sync Key

Headers

authorization
string | null
X-API-Key
string | null
X-Stella-Merchant-Id
string | null

Response

Successful Response

Response from POST /rotate-sync-key. Plaintext secret is NOT in the response — Zunkiree received it via push_sync_credentials, Stella has no need to surface it again. UI displays the new prefix as a confirmation.

key_id
string
required
secret_prefix
string
required
created_at
string<date-time>
required
push_pending
boolean
default:false

True iff push_sync_credentials failed after the new key was created. The new key is active on Stella; Zunkiree still uses the previous one. Caller can retry by calling rotate again — but the migration 003 trigger caps active keys at 2, so they'll need to revoke first.