Rotate Clerk machine secret key

Rotate a machine's secret key in a connected Clerk instance.

← All Clerk endpoints · Capability overview

POST/v1/clerk/machines/{machine_id}/rotate-secret-key

https://api.vee3.io/v1/clerk/machines/{machine_id}/rotate-secret-key

10 tokens

Rotate a machine's secret key in a connected Clerk instance.

Authorization

Send your API key in the Authorization header:

Authorization: Bearer YOUR_API_KEY

MCP

The same capability is available as an MCP tool on Vee3 hosted MCP.

Tool name

clerk.rotate_machine_secret_key

Parameters3 fields

clerk_instance_idstringOptional

Clerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.

machine_idstringRequired

Clerk machine id (mch_...) to retrieve or modify.

previous_token_ttlintegerRequired

Seconds the previous secret key remains valid after rotation (0–28800).

min 0, max 28800

Response3 fields

machine_secret_keyobject

2 fields

Rotated machine secret key payload from the Backend API.

objectstring

Object type (machine_secret_key).

secretstring

Machine secret key. Treat as high-privilege — do not log.

HTTP errors: clerk_connection_required, clerk_connection_not_found, clerk_connection_invalid, validation_error, unauthorized, payment_required

Example request

Python

import requests

url = "https://api.vee3.io/v1/clerk/machines/{machine_id}/rotate-secret-key"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json",
}
payload = {
    "machine_id": "mch_2abc123",
    "previous_token_ttl": 3600
}

response = requests.post(url, headers=headers, json=payload)
response.raise_for_status()
data = response.json()
print(data)

Example responses1 example

200New secret key after rotation.

rotated_machine_secret_key.json

{
  "machine_secret_key": {
    "object": "machine_secret_key",
    "secret": "msk_test_secret_value"
  }
}