Skip to main content

Rotate a provider key

Replace a provider key with a new one without breaking active workloads.

For background on how provider keys work, see Provider Keys.

When to rotate

  • A provider key has been compromised, or you suspect it has

  • Your organization has a periodic key rotation policy

  • You're migrating traffic to a new provider account

Steps

  1. Create a replacement key in the upstream provider dashboard.

  2. In otari.ai, open Organization Settings → Provider Keys and add the new key.

  3. Mark the new key as Default for the provider, or pin it in the specific workspaces you want to switch first.

  4. Send a test request from a workspace that uses this provider, then confirm the request still succeeds in the Usage tab.

  5. Once requests are flowing through the new key, revoke the old key in the upstream provider dashboard.

Removing a key from otari.ai does not revoke it with the upstream provider. Step 5 is required to finish the rotation.

Did this answer your question?