Skip to main content
curl --request POST \
  --url https://api.usedatabrain.com/api/v2/service-token/rotate \
  --header 'Authorization: Bearer 550e8400-e29b-41d4-a716-446655440000' \
  --header 'Content-Type: application/json' \
  --data '{"expireAt":3600}'

const response = await fetch('https://api.usedatabrain.com/api/v2/service-token/rotate', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer 550e8400-e29b-41d4-a716-446655440000',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    expireAt: 3600
  })
});
const data = await response.json();
if (data.error) throw new Error(data.error.message);
console.log('New service token:', data.key);

import requests

url = "https://api.usedatabrain.com/api/v2/service-token/rotate"
headers = {
    "Authorization": "Bearer 550e8400-e29b-41d4-a716-446655440000",
    "Content-Type": "application/json"
}
payload = {
    "expireAt": 3600
}

response = requests.post(url, headers=headers, json=payload)
data = response.json()
if data.get("error"):
    raise Exception(data["error"].get("message", "Request failed"))
print("New service token:", data["key"])

{
  "key": "7c9e6679-7425-40de-944b-e07fc1f90ae7"
}

{
  "error": {
    "code": "INVALID_REQUEST_BODY",
    "message": "\"expireAt\" is required"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "API Key is not provided or Invalid!"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "API Key is invalid or expired!"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "Invalid Service Token"
  }
}

{
  "error": {
    "code": "EXPIRED_SERVICE_TOKEN",
    "message": "Service token is already expired"
  }
}

{
  "error": {
    "code": "INTERNAL_SERVER_ERROR",
    "message": "Internal server error"
  }
}
POST
/
api
/
v2
/
service-token
/
rotate
curl --request POST \
  --url https://api.usedatabrain.com/api/v2/service-token/rotate \
  --header 'Authorization: Bearer 550e8400-e29b-41d4-a716-446655440000' \
  --header 'Content-Type: application/json' \
  --data '{"expireAt":3600}'

const response = await fetch('https://api.usedatabrain.com/api/v2/service-token/rotate', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer 550e8400-e29b-41d4-a716-446655440000',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    expireAt: 3600
  })
});
const data = await response.json();
if (data.error) throw new Error(data.error.message);
console.log('New service token:', data.key);

import requests

url = "https://api.usedatabrain.com/api/v2/service-token/rotate"
headers = {
    "Authorization": "Bearer 550e8400-e29b-41d4-a716-446655440000",
    "Content-Type": "application/json"
}
payload = {
    "expireAt": 3600
}

response = requests.post(url, headers=headers, json=payload)
data = response.json()
if data.get("error"):
    raise Exception(data["error"].get("message", "Request failed"))
print("New service token:", data["key"])

{
  "key": "7c9e6679-7425-40de-944b-e07fc1f90ae7"
}

{
  "error": {
    "code": "INVALID_REQUEST_BODY",
    "message": "\"expireAt\" is required"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "API Key is not provided or Invalid!"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "API Key is invalid or expired!"
  }
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "Invalid Service Token"
  }
}

{
  "error": {
    "code": "EXPIRED_SERVICE_TOKEN",
    "message": "Service token is already expired"
  }
}

{
  "error": {
    "code": "INTERNAL_SERVER_ERROR",
    "message": "Internal server error"
  }
}
Rotate your organization service token. The current token is set to expire after a grace period (in seconds), and a new service token is returned. Use this for key rotation and security best practices.
The service token used in the Authorization header is the token being rotated. You only need to provide expireAt in the request body — no token field required.

​
Authentication

Use your current service token in the Authorization header. The token provided here is the one that will be expired and replaced. To access your service token:
  1. In Settings page, navigate to the Service Tokens section.
  2. Click the “Generate Token” button to create a new service token if you don’t have one already.

​
Headers

​
Authorization
string
required
Bearer token for API authentication. Use the service token you want to rotate.
Authorization: Bearer 550e8400-e29b-41d4-a716-446655440000
​
Content-Type
string
required
Must be application/json when sending a JSON body.
Content-Type: application/json

​
Request Body

​
expireAt
number | string
required
Duration in seconds until the current token expires. The old token remains valid until this many seconds from the request, then it is invalidated. Accepts a number or a numeric string. Use 0 to expire immediately. Common values: 0 (immediate), 3600 (1 hour), 86400 (24 hours).

​
Response

On success, the API returns 200 with a JSON object:
​
key
string
The new service token (UUID). Use this for all future service-level API calls. Store it securely; the previous token will expire per expireAt.
On error, the API returns a JSON object with error.code and error.message and an appropriate HTTP status (400, 401, or 500).

​
Examples

​
HTTP Status Code Summary

Status CodeDescription
200OK – New service token returned in key
400Bad Request – Missing parameters, invalid key format, not a service token, or token already expired
401Unauthorized – Service token not found in DB or already expired
500Internal Server Error – Server error

​
Possible Errors

CodeMessageHTTP Status
INVALID_REQUEST_BODYJoi validation message (e.g. "expireAt" is required)400
AUTHENTICATION_ERROR"API Key is not provided or Invalid!" – missing/invalid UUID format (400); "API Key is invalid or expired!" – not found or expired in DB (401); "Invalid Service Token" – token is a data app key, not a service token (400)400 / 401
EXPIRED_SERVICE_TOKENService token is already expired400
INVALID_SERVICE_TOKENInvalid service token400
INTERNAL_SERVER_ERRORInternal server error or GraphQL error message500