Key rotation

Rotate keys on a schedule and immediately whenever an exposure is suspected.

A safe rotation looks like:

1. Mint a new key in the same environment (same sk_test_ or sk_live_ prefix).
2. Deploy the new key to your services.
3. Verify traffic is using the new key in the dashboard's Key usage view.
4. Revoke the old key.

Revocation is immediate

Once revoked, a key returns 401 invalid_api_key on the next request. Make sure the new key is fully rolled out before revoking.