Providers & keys
Key rotation
Rotate provider keys atomically without dropping requests.
Rotate a provider key without downtime. Rotation is atomic: the new key becomes active and the old key is revoked in a single transaction, so in-flight routing always has a valid key.
- Soft revoke keeps the key record for audit purposes while disabling it.
- Hard delete removes the key entirely.
Every rotation and revocation is written to the audit log.
Manage rotation in the dashboard under Settings → Provider Keys, or via the tenant provider-keys API.