> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexslot.gg/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotate the partner signing secret

> Rotates the HMAC signing secret for the calling user's partner. Returns the new plaintext ONCE — copy it immediately; we don't persist plaintext anywhere. The previous secret is invalidated as soon as this request returns 200.



## OpenAPI

````yaml /openapi.json post /api/public/v1/me/partner/rotate-signing-secret
openapi: 3.0.3
info:
  title: Flexslot API
  version: 1.0.0
  description: API documentation for Flexslot decks application
servers:
  - url: https://api.flexslot.gg
    description: Production
  - url: https://api-dev.flexslot.gg
    description: Development
security: []
paths:
  /api/public/v1/me/partner/rotate-signing-secret:
    post:
      tags:
        - Me
      summary: Rotate the partner signing secret
      description: >-
        Rotates the HMAC signing secret for the calling user's partner. Returns
        the new plaintext ONCE — copy it immediately; we don't persist plaintext
        anywhere. The previous secret is invalidated as soon as this request
        returns 200.
      operationId: me_partner_rotate_signing_secret
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PartnerRotateSigningSecretResponse'
          description: ''
      security:
        - PersonalAccessToken: []
        - OAuth2Bearer: []
components:
  schemas:
    PartnerRotateSigningSecretResponse:
      type: object
      properties:
        plaintext_signing_secret:
          type: string
          description: Shown ONCE — copy immediately. Cannot be recovered.
      required:
        - plaintext_signing_secret
  securitySchemes:
    PersonalAccessToken:
      type: http
      scheme: bearer
      bearerFormat: flx_pat_...
      description: 'User-issued personal access token (format: flx_pat_<token>).'
    OAuth2Bearer:
      type: http
      scheme: bearer
      bearerFormat: flx_at_...
      description: >-
        OAuth2 access token issued via the authorization-code + PKCE flow
        (format: flx_at_<token>). Grants the partner user-scoped access to act
        on behalf of the consenting end-user.

````