> ## Documentation Index > Fetch the complete documentation index at: https://docs.slng.ai/llms.txt > Use this file to discover all available pages before exploring further. # Rotate Vault Entry > Overwrite the stored value of a Vault entry. For a secret this is the only way the value ever changes, and it is still never read back. Rotation locks the closure of active inbound agents that reference the entry, bumps its revision, and records who rotated it and when. To change only the description, use the description endpoint instead. ## OpenAPI ````yaml /api-reference/agents/shared-resources.oas.yaml patch /v1/agents/secrets/{name} openapi: 3.1.0 info: title: SLNG Agent Resources API version: 1.0.0 description: >- Public control-plane API for agent resources: tools, MCP servers, Vault secrets and variables, and client models. servers: - url: https://api.agents.slng.ai description: Production security: - bearerAuth: [] tags: - name: Tools description: Create, test, publish, version, and attach agent tools. x-page-icon: wrench - name: MCP servers description: Configure MCP servers and refresh their live capabilities. x-page-icon: plug - name: Vault description: >- Store organisation secrets and readable variables without exposing secret values. x-page-icon: key - name: Client models description: Manage bring-your-own LLM provider credentials. x-page-icon: brain paths: /v1/agents/secrets/{name}: patch: tags: - Vault summary: Rotate Vault Entry description: >- Overwrite the stored value of a Vault entry. For a secret this is the only way the value ever changes, and it is still never read back. Rotation locks the closure of active inbound agents that reference the entry, bumps its revision, and records who rotated it and when. To change only the description, use the description endpoint instead. operationId: rotateVaultEntry parameters: - name: name in: path required: true description: Unique name of the Vault entry whose stored value you are replacing. schema: type: string title: Name requestBody: description: The replacement value to store for the entry. required: true content: application/json: schema: $ref: '#/components/schemas/OrgSecretRotate' responses: '200': description: >- The rotated Vault entry with its bumped revision. Secret values are masked in the response. content: application/json: schema: $ref: '#/components/schemas/OrgSecretOut' '401': $ref: '#/components/responses/UnauthorizedError' '403': $ref: '#/components/responses/ForbiddenError' '404': description: No Vault entry with this name exists in the organisation. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: No shared secret or variable named 'STRIPE_KEY' error: code: RESOURCE_NOT_FOUND message: No shared secret or variable named 'STRIPE_KEY' request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b '409': description: >- The Vault changed concurrently while rotation was acquiring locks. The request is safe to retry. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: The Vault changed concurrently. Retry the rotation. error: code: VAULT_ROTATION_DEPENDENCY_CHURN message: The Vault changed concurrently. Retry the rotation. request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: true '422': $ref: '#/components/responses/ValidationError' '429': $ref: '#/components/responses/RateLimitError' '500': $ref: '#/components/responses/InternalServerError' components: schemas: OrgSecretRotate: properties: value: type: string maxLength: 10000 minLength: 1 description: >- Replacement value to store for the entry. It is write-only and never returned in responses. title: Value writeOnly: true additionalProperties: false type: object required: - value title: OrgSecretRotate example: value: sk_live_rotated description: Overwrite the stored value (both kinds). OrgSecretOut: properties: id: type: string format: uuid title: Id organisation_id: type: string format: uuid title: Organisation Id name: type: string title: Name kind: type: string enum: - secret - variable description: >- Kind of this entry: `secret` values are never returned, `variable` values are readable by authorized callers. title: Kind description: anyOf: - type: string - type: 'null' title: Description value: anyOf: - type: string - type: 'null' description: >- The stored value, returned only for variables to authorized readers. Always null for secrets, whose value is never returned. title: Value has_value: type: boolean description: >- Whether a value is stored. True even for secrets, whose value is withheld from responses. title: Has Value default: true is_managed: type: boolean description: >- Whether this entry is managed by SLNG rather than created directly by your organisation. title: Is Managed default: false revision: type: integer title: Revision created_by: anyOf: - type: string - type: 'null' title: Created By last_rotated_by: anyOf: - type: string - type: 'null' title: Last Rotated By last_rotated_at: anyOf: - type: string format: date-time - type: 'null' title: Last Rotated At created_at: type: string format: date-time title: Created At updated_at: type: string format: date-time title: Updated At type: object required: - id - organisation_id - name - kind - revision - created_at - updated_at title: OrgSecretOut description: >- List and detail view of a Vault entry. Secret values are never returned; variable values are returned to authorized readers in `value` (null for secrets). example: id: 3fa85f64-5717-4562-b3fc-2c963f66afa6 organisation_id: 9c1e5b2a-1111-4c3d-8e2f-abcdef012345 name: STRIPE_KEY kind: secret description: Primary Stripe API key value: null has_value: true is_managed: false revision: 2 created_by: user:alice last_rotated_by: user:bob last_rotated_at: '2026-08-20T12:00:00Z' created_at: '2026-08-01T09:00:00Z' updated_at: '2026-08-20T12:00:00Z' ApiErrorResponse: type: object description: Standard error envelope returned for failed requests. required: - detail - error properties: detail: type: string description: Short human-readable summary of the error. error: $ref: '#/components/schemas/ApiErrorDetail' example: detail: A shared secret or variable named 'STRIPE_KEY' already exists error: code: RESOURCE_CONFLICT message: A shared secret or variable named 'STRIPE_KEY' already exists request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b ApiErrorDetail: type: object description: Structured error detail carried inside an error response. required: - code - message properties: code: type: string description: Stable machine-readable error code. example: RESOURCE_CONFLICT message: type: string description: Human-readable explanation of the error. example: A shared secret or variable named STRIPE_KEY already exists request_id: type: - string - 'null' description: Identifier for this request, useful when contacting support. example: req_01H8XY7Z9QEXAMPLE retryable: type: boolean description: Whether retrying the same request may succeed. example: false fields: type: array description: >- Per-field validation problems, when the error relates to specific request fields. items: type: object additionalProperties: true example: [] example: code: PUBLIC_SHARED_RESOURCES_DISABLED message: Public shared resources are disabled for this organisation request_id: req_01H8XY7Z9QEXAMPLE retryable: false responses: UnauthorizedError: description: The API key is missing or invalid. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: Invalid API key error: code: AUTH_REQUIRED message: Invalid API key request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false ForbiddenError: description: >- The caller lacks permission, or the public shared-resource API is disabled for the organisation. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' examples: permission_denied: summary: Owner or admin access required value: detail: Organisation owner or admin access required error: code: PERMISSION_DENIED message: Organisation owner or admin access required request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false api_disabled: summary: Public shared-resource API disabled for the organisation value: detail: >- Public shared-resource API access is disabled for this organisation error: code: PUBLIC_SHARED_RESOURCES_DISABLED message: >- Public shared-resource API access is disabled for this organisation request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false ValidationError: description: Request validation failed. See error.fields for the offending fields. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: >- Request validation failed. Fix the highlighted fields and try again. error: code: VALIDATION_FAILED message: >- Request validation failed. Fix the highlighted fields and try again. request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false fields: - path: name message: >- Name must be SCREAMING_SNAKE_CASE: start with a letter, then letters, digits, or underscores (e.g. STRIPE_API_KEY) RateLimitError: description: >- The organisation exceeded its request rate limit. Retry after the window resets. headers: Retry-After: schema: type: integer X-RateLimit-Limit: schema: type: integer X-RateLimit-Remaining: schema: type: integer content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: Rate limit exceeded. Maximum 60 requests per 60 seconds. error: code: INTERNAL_ERROR message: Rate limit exceeded. Maximum 60 requests per 60 seconds. request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false InternalServerError: description: The request failed unexpectedly. Secret values are never exposed. content: application/json: schema: $ref: '#/components/schemas/ApiErrorResponse' example: detail: An unexpected error occurred. error: code: INTERNAL_ERROR message: An unexpected error occurred. request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b retryable: false securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: SLNG API key description: Your SLNG consumer API key. ````