Replace OAuth client secret
Rate limit: 60 requests per 60 seconds. This is the default shared quota — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget.
Replaces the application’s clientSecret and returns the new one. Only the application’s admin (the caller’s GCID must be in adminGcids) can rotate. Non-admins receive 404 Not Found (opaque authorization). The current secret is not required - ownership is proven by the access token and the application’s adminGcids, not by presenting the old secret, which may have been leaked; a leaked secret is the usual reason to rotate. The previous secret stops working immediately - there is no overlap window, so anything still using it fails as soon as this call returns. The new secret is returned only in this response (one-time reveal) and can never be read again, only replaced. Nothing else about the application changes. An application created moments earlier may briefly answer 404 while it propagates; retry.
Authorizations
API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe.
Demo credential for trying the API from these docs: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663
User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it.
Demo credential for trying the API from these docs: eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_
Headers
A unique request identifier.
"0bec67d1-0c5e-4bb7-9126-bf148f030931"
Path Parameters
The OAuth clientId of the application whose secret should be replaced.
Response
Secret replaced. The new clientSecret is included once and only once.