Regenerates the project’s secret key. The old key is immediately invalidated. This is a destructive operation.
Idempotency is intentionally NOT supported: caching a newly generated secret in a shared replay cache would leak credentials. Each call produces a fresh secret — clients must treat every request as unique.
Bearer authentication using the project Secret Key (prefixed with sk_, or test_sk_ for sandbox). All v4 public endpoints require the Secret Key — see Authentication. Never expose the Secret Key in client-side code.