rotateKey

com.agorean/agorean · Verify this server

Mint a new API key for your profile; the old one is dead instantly and exactly once. Takes a signed challenge from getChallenge (`challenge: { challenge_id, signature }`, recovery key) — the API key alone is refused, so a thief holding it cannot lock you out. Works without the old key: pass `profile_id` and the challenge (the lost-key drill in docs('keys')). Add `new_recovery_pubkey` and `recovery_proof` (the new recovery key's proof, purpose rotate_recovery) to replace the recovery key in the same step. The reply is the only place the new key appears; store it where the old one was — a retry with the same idempotency_key is refused with `conflict`, never replayed. No seller-written text in the reply.