Rotate an MCP key

POST/v1/mcp-keys/{id}/rotate

Rotate an MCP key.

Issues a new secret, returned once in api_key; the old one stops working at once. The key's ID, name, allowlist and limits stay, so only the secret changes in the agents' configuration. Allowed whatever the plan.

Requires an organization admin key, or a workspace admin key for the key's workspace. Returns 409 when the key is revoked or expired, 404 when it does not exist in the organization.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Path parameters

idstring<uuid>required
The MCP key's ID (UUID).

Query parameters

organizationstringrequired
The organization's identifier (slug).

Responses

200application/json

keyobject
An MCP key: the va_ key an agent presents to the MCP Gateway. It works only on the gateway (an MCP server's URL and the gateway's own server), never on the VectorAxis API. The secret is returned once, when the key is created or rotated.
Child attributes
- idstring<uuid>
  The key's ID (UUID), used in the API paths.
- namestring
  Display name.
- organizationstring
  The organization that owns it.
- workspace_idstring<uuid>
  The workspace it belongs to (UUID).
- key_hintstring
  The last four characters of the key.
- statusstring
  ACTIVE or REVOKED.
- tool_allowliststring[]
  The tools it may call ({server slug}/{tool name} or {server slug}/*). Absent: every tool the registry allows.
- rate_limit_rpminteger<int32>
  Gateway calls per minute. Absent: only the plan's per-workspace limit.
- rate_limit_rpdinteger<int32>
  Gateway calls per day. Absent: no daily limit of its own.
- expires_atstring<date-time>
  When it stops working (ISO 8601). Absent: never.
- last_used_atstring<date-time>
  When it was last used on the gateway (ISO 8601).
- created_bystring
  The user who created it.
- created_atstring<date-time>
  When it was created (ISO 8601).
api_keystring
The full key (va_...). Shown only now: only its hash is stored, so store it safely.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.