curl -X POST 'https://admin-api.exa.ai/team-management/api-keys/{id}/rotate' \
  -H "x-api-key: $EXA_SERVICE_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "gracePeriodSeconds": 86400
  }'

import os

import requests

response = requests.post(
    'https://admin-api.exa.ai/team-management/api-keys/{id}/rotate',
    headers={'x-api-key': os.environ['EXA_SERVICE_KEY']},
    json={'gracePeriodSeconds': 86400}
)
response.raise_for_status()

new_secret = response.json()['apiKey']['secret']

const response = await fetch('https://admin-api.exa.ai/team-management/api-keys/{id}/rotate', {
  method: 'POST',
  headers: {
    'x-api-key': process.env.EXA_SERVICE_KEY,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({ gracePeriodSeconds: 86400 })
});

const { apiKey } = await response.json();
const newSecret = apiKey.secret;

{
  "apiKey": {
    "id": "00000000-0000-4000-8000-000000000000",
    "publicId": "key_a1B2c3D4e5F6g7H8i9J0",
    "secret": "00000000-0000-4000-8000-000000000000",
    "name": "Production API Key",
    "rateLimit": 1000,
    "budgetCents": null,
    "isOverBudget": false,
    "teamId": "cmdz0ppkp0001x7ec2yh4ph46",
    "createdAt": "2026-01-01T00:00:00.000Z",
    "previousSecretExpiresAt": "2026-10-06T12:00:00.000Z"
  }
}

{
  "error": "Invalid API key ID format."
}

{
  "error": "Unauthorized"
}

{
  "error": "This key is managed by an integration and cannot be rotated"
}

{
  "error": "API key not found"
}

{
  "error": "<string>",
  "code": "previous_secret_active",
  "previousSecretExpiresAt": "2023-11-07T05:31:56Z"
}