Security

API Key Rotation

POST /v1/keys/rotate
curl -X POST https://poldex-api.plain-water-cd0f.workers.dev/v1/keys/rotate \
  -H "x-api-key: pd_live_OLD_KEY"

Lost key

POST /v1/keys/recovery-requests
curl -X POST https://poldex-api.plain-water-cd0f.workers.dev/v1/keys/recovery-requests \
  -H "Content-Type: application/json" \
  -d '{"contact_email":"ops@company.com","org_name":"Company","reason":"Lost production key"}'

Behavior

Raw keys cannot be recovered. Rotation revokes active keys and returns a new one once.