Rotate API key

Guide — rotate a Stratix API key without downtime.

API keys rotate with a 24-hour grace period.

Steps

1. Settings → API keys → Rotate on the key in question.
2. Stratix returns a new key value (one-time-display). Copy it.
3. Update the new value in your secret store / env vars / CI secrets.
4. Old key continues to work for 24 hours.
5. After rollout, the old key auto-expires. No action needed.

When to rotate

• Compromise suspected
• Quarterly hygiene
• Departing team member had access
• Switching CI runners

After rotation

• Verify the new key works in a non-production runner first
• Watch the audit log for unexpected usage on the old key during the grace period

See also

• API keys reference
• Authentication