Replaces the endpoint signing secret and returns the new material only in this original response. Existing in-flight deliveries may already hold the old secret. Optional If-Match uses the ordinary endpoint GET validator. This one-time response is excluded from API log bodies and Redis replay results; it has Cache-Control: no-store and no ETag. A reused Idempotency-Key returns idempotency_outcome_unknown (409) without executing again while its reservation is retained. Redis expiry/eviction provides no durable exactly-once guarantee. If the response is lost, inspect the endpoint and deliberately rotate using a new key and current validator; GET never reveals signing material. Requires workspace-level API access management permission.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||