REST API Reference
Key Management (KEK) API
Manage tenant Key Encryption Keys (KEKs), trigger zero-downtime key rotation, and inspect cryptographic version epochs.
Rotate Master Key
Mints a new 256-bit symmetric KEK and registers it as the primary key. Existing secrets are decrypted on-the-fly using archived key versions without requiring immediate re-encryption.
Rotate Key Encryption KeyAuth
Rotate master KEK to a new cryptographic epoch.
Status Codes
- Name
200- Type
- HTTP
- Description
- Master key successfully rotated to new epoch.
- Name
403- Type
- HTTP
- Description
- Requires platform admin authorization.
Request
POST/v1/secrets/keys/rotate
Response 200