> ## Documentation Index
> Fetch the complete documentation index at: https://developers.getbukki.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Key rotation

> Replace Bukki API keys without interrupting an integration.

Workspace owners and administrators rotate keys from **Workspace Settings → API access**.

<Steps>
  <Step title="Create the replacement">
    Select **Rotate** on the active key. Bukki displays the replacement secret once.
  </Step>

  <Step title="Update the integration">
    Store the replacement in the integration's secret manager and deploy the change.
  </Step>

  <Step title="Verify requests">
    Confirm that new requests authenticate with the replacement key.
  </Step>

  <Step title="Revoke the old key">
    Revoke the old credential as soon as the deployment is confirmed. Otherwise, it expires automatically after the 24-hour overlap.
  </Step>
</Steps>

For a suspected compromise, skip the overlap and revoke the exposed key immediately. Revocation takes effect on the next request.