---
title: "API Key Client Secret"
slug: "regenerate-client-secret"
updated: 2025-01-13T09:02:07Z
published: 2025-06-23T14:52:52Z
canonical: "docs.plainid.io/regenerate-client-secret"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plainid.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Regenerate Client Secret

Post/env-mgmt/1.0/api-key/clients/{id}/secrets

This API enables users to regenerate a new secret for a specific Client Credential by the ClientID. This method invalidates the previous secret.

### Notice

 Accessing the Policy Management APIs is through a dedicated domain/URL according to your PlainID Tenant Location:   

  `https://api.{REGION}.plainid.io`
    
   

  **United States (US)** -
  `https://api.us1.plainid.io`   
 **Canada (US)** -
  `https://api.ca1.plainid.io`   
 **Europe (US)** -
  `https://api.eu1.plainid.io`  

Replace`{REGION}` with your PlainID Tenant region (e.g. us1, eu1, ca1, etc.).

    

  

### Important note about headers

Refer to the headers below to modify your cURL sample. Check if the following headers are in the sample, if not, ensure you add it to your cURL sample before pasting into your API tool.   
 

#### Headers

 *Required 

| Header | Value | cURL Line |
| --- | --- | --- |
| Accept | `application/json` | `-H"Accept: application/json"` |

  

### cURL Sample Guidelines

In order for the relevant parameters to appear in the cURL sample, you can input the values in the interactive API console on the right. They will then appear in the cURL sample on the bottom of the page in the correct format.

   

### Using HTML Encoded Special Characters

 

Use HTML encoded patterns when working with values that contain special characters like spaces, dashes, etc. Refer to this [HTML URL Encoding Reference](https://www.w3schools.com/tags/ref_urlencode.ASP) for a full list.

   

SecurityHTTPType bearer

For more details about Administration API Authentication, check out the Authentication APIs documentation. Provide your bearer token in the Authorization header when making requests to protected resources. Example: `Authorization: Bearer 123`

Path parametersidstringRequired

Client ID to regenerate the Client Secret for.

Responses200

Client

<select class='api-response-data' aria-label='Media type'><option value='f6751b2a-1ba7-4bc0-bce6-051aff185f8f'>application/json</option>
</select>object  idstring    
ownerIdstring  (UUID)    
ownerTypestring    
namestring    
descriptionstring    
secretstring    
tokenDurationstring  (ISO-8601 duration)    
permissionstring    

403

Forbidden

<select class='api-response-data' aria-label='Media type'><option value='cb6c1d09-71a0-4e2d-8cfa-13c061ac920d'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='a86acb21-4c8f-487a-9af9-eb1e833a133d'>forbidden environment</option>
<option value='b057ad3e-10c0-4349-a27a-8997b08333e7'>forbidden tenant</option>
</select>forbidden environment

```json
{
  "id": "EW62XA",
  "status": 403,
  "name": "forbiddenEnvironment",
  "message": "operation get for resource Environment {ownerId} is not allowed because the current user does not have the appropriate permissions"
}
```

forbidden tenant

```json
{
  "id": "EW63XA",
  "status": 403,
  "name": "forbiddenTenant",
  "message": "operation get for resource Environment {ownerId} is not allowed because the current user does not have the appropriate permissions"
}
```

Expand Allobject  codestring    
idstring    
statusinteger    
namestring    
messagestring    
argsobject  pathstring    

404

Client not found

<select class='api-response-data' aria-label='Media type'><option value='1b3a3cec-0dcb-41be-a3f0-0d83afc6ef8e'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='6e4fd0f0-fa62-4e89-be2c-04a590ce05f2'>client not found</option>
</select>client not found

```json
{
  "id": "EW64XA",
  "status": 404,
  "name": "clientNotFoundError",
  "message": "Client {name} not found"
}
```

Expand Allobject  codestring    
idstring    
statusinteger    
namestring    
messagestring    
argsobject  pathstring