Skip to main content
POST
Rotate app credentials

Body

application/json
client_id
string<uuid>
required

Current client_id of the app being rotated.

Example:

"9a8b7c6d-5e4f-3a2b-1c0d-9e8f7a6b5c4d"

email
string<email>
required

Email address registered with the app. Used to verify ownership. The API never reveals which email is on file.

Example:

"dev@mysaas.com"

app_name
string

New name shown to users on the consent screen. Max 100 chars. If omitted, the current name is kept.

Maximum string length: 100
Example:

"My SaaS v2"

description
string

New description of what your app does. Max 500 chars. If omitted, the current description is kept.

Maximum string length: 500
Example:

"Updated integration with Vendaze."

avatar_image
string

Public HTTPS URL or full base64 data URI of your app logo (e.g. data:image/png;base64,...). Accepted formats: JPEG, PNG, WebP, GIF, BMP, TIFF. If omitted, the current avatar is kept.

Example:

"data:image/png;base64,iVBORw0KGgo..."

redirect_uris
string<uri>[]

New list of HTTPS redirect URIs. Replaces the previous list entirely. If omitted, the current list is kept.

Example:

Response

Credentials rotated successfully. New credentials sent by email.

data
object