Immediately revokes the existing register API key and issues a new one.
Use this when a device is compromised, replaced, or during routine rotation. The old key is invalidated the moment this endpoint is called — provision the new key to the device before the next operation attempt.
A register credential must have been previously issued via
POST /registers/:id/activate with issue_register_credential: true.
Platform API key sent as Authorization: Bearer ofk_platform_....
Platform integrators also pass OpenFiskal-Organization: org_xxx
to act on behalf of a merchant.
Merchant organization ID. Required for platform integrators acting on behalf of a specific merchant. Omit when using an organization-scoped API key directly.
Credential rotated. New key returned once.