Skip to main content
PUT
Rotate the token
Replaces the service account token stored for a vault config. The new token is health-checked against the provider before it is written, so a token that cannot reach op_vault_id is rejected and the old one stays in place. Returns 204 No Content on success.
The request body carries a plaintext service account token. Send it only over HTTPS, never log it, and note that rotation is not idempotent: a retry after a 5xx may apply twice.

Path parameters

string
required
The vault config’s id (UUID).

Request body

string
required
The new 1Password service account token. Write-only and never returned.

Examples


Errors