Infisical

Rotate Phaseo API keys without downtime by creating a replacement key with a management key, switching your app to it, then deleting the old one. This page gives the values an Infisical connection uses for that rotation.

Phaseo isn’t a selectable App Connection in Infisical yet. The connector, tests, and UI entry still have to be accepted into Infisical. Until then, use the requests below from your own rotation job.

How rotation works

Phaseo shows an API key’s value only once, when it’s created. The old and new keys both work until you delete the old one, so your app can switch over while the secret updates.

Create a scoped management key

In Settings → Management Keys, create a key with these capabilities:

Capability	Used to
`keys:read`	Check the connection and list managed keys.
`keys:write`	Create replacement keys.
`keys:delete`	Revoke old keys.

Store the phaseo_v1_mk_... value in Infisical. Management keys control your account and can’t be used for inference.

Connection details

Field	Value
Base URL	`https://api.phaseo.app/v1`
Authentication	`Authorization: Bearer <PHASEO_MANAGEMENT_KEY>`
Check the connection	`GET /keys`
List API keys	`GET /keys`
Create an API key	`POST /keys`
Revoke an API key	`DELETE /keys/{id}`

Create the replacement key

curl https://api.phaseo.app/v1/keys \
  -H "Authorization: Bearer $PHASEO_MANAGEMENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "infisical-production",
    "limit": 100,
    "limit_reset": "monthly",
    "include_byok_in_limit": false
  }'

The response holds the new key once in data.key, and its ID in data.id.

Field	Values
`limit`	Spend limit in US dollars.
`limit_reset`	`daily`, `weekly`, or `monthly`.
`include_byok_in_limit`	Accepted for compatibility only. BYOK usage never counts toward this limit.

Revoke the old key

curl -X DELETE https://api.phaseo.app/v1/keys/$PREVIOUS_KEY_ID \
  -H "Authorization: Bearer $PHASEO_MANAGEMENT_KEY"

Deleting is idempotent: deleting a key that’s already deleted returns 200 with {"deleted": true}, so a retried rotation is safe.

Last modified on November 5, 2026

Overview

Models & Routing

Features

Integrations

Workspace & Access

Reliability & Operations

Platform & Research

Migration Guides

Community

How rotation works

Create a scoped management key

Connection details

Create the replacement key

Revoke the old key

​How rotation works

​Create a scoped management key

​Connection details

​Create the replacement key

​Revoke the old key

How rotation works

Create a scoped management key

Connection details

Create the replacement key

Revoke the old key