Rotate With Overlap for public API keys, key ends enforced, key changes in the settings change log (Settings Home A3)

Shipped: November 15, 2026 at 1:43 PM UTC
Author: Kamo
Commit: 10bb89e

- POST **************** {overlapHours 1-168, default 72} (MANAGE_ACCESS_RULES): a new key with the same label, web addresses, abilities and tier, shown once; the old key ends after the overlap. - A key past expiresAt no longer validates (PublicChatService), and a one-pod sweep turns ended keys off and drops APIService's cached answer. The list carries expiresAt. - Every key add / switch / ability change / removal / rotation writes a THAT-only row (secrets) to the organization settings change log at **************** (key accessRules), never undoable.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing