> ## Documentation Index
> Fetch the complete documentation index at: https://docs.britive.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Generate a new token for an existing CSPM integration

> Generates a fresh cleartext token for an existing integration and replaces the stored one, in place -- the integration's id, name, app, description, and ingest URL are all unchanged, so nothing needs reconfiguring on the CSPM tool's side except the token itself. The old token stops working immediately; the new cleartext token is returned once and never stored. `createdOn` in the response reflects this new token's creation time (it tracks the active token, not the integration record), so admins can tell when a token was last rotated.


## OpenAPI

````json POST /api/cspm/integrations/{name}/rotate
{
  "openapi": "3.0.1",
  "info": {
    "title": "Britive Services API Documentation",
    "version": "v1",
    "description": "API documentation for Users, Tags, Identity providers, Applications, Reporting, Audit logs, Tenants, SSO, Profiles, Password policies, MFA, Access Builder Settings, etc."
  },
  "servers": [
    {
      "url": "https://{tenantURL}",
      "description": "The primary server",
      "variables": {
        "tenantURL": {
          "default": "test.britive-app.com",
          "description": "The host of the server"
        }
      }
    }
  ],
  "security": [
    {
      "bearerAuth": []
    }
  ],
  "tags": [
    {
      "name": "Access Request Tag Membership",
      "description": "Manage tag memberships granted via access requests"
    },
    {
      "name": "API Tokens",
      "description": "Manage API Tokens"
    },
    {
      "name": "Application Environments",
      "description": "Manage Application Environments"
    },
    {
      "name": "Application Environments - Accounts",
      "description": "Manage Application Environments Accounts"
    },
    {
      "name": "Application Profiles",
      "description": "Manage Application Profiles"
    },
    {
      "name": "Application Profiles - Advanced Settings",
      "description": "Manage Application Profiles Advanced Settings"
    },
    {
      "name": "Application Profiles - Permissions",
      "description": "Manage Application Profiles Permissions"
    },
    {
      "name": "Application Profiles - Permission Constraint Manager",
      "description": "Manage Profile Permission Constraints for the permissions that support to define constraints."
    },
    {
      "name": "Application Profiles - Policies",
      "description": "Manage Application Profiles Policies"
    },
    {
      "name": "Application Profiles - Scopes",
      "description": "Manage Application Profiles Scopes"
    },
    {
      "name": "Application Profiles - Session Attributes",
      "description": "Manage Application Profiles Session Attributes"
    },
    {
      "name": "Application Profiles - Sessions",
      "description": "Manage Application Profiles Sessions"
    },
    {
      "name": "Application Profiles - Users and Tags",
      "description": "Manage Application Profiles"
    },
    {
      "name": "Applications",
      "description": "Manage Applications"
    },
    {
      "name": "Applications - Access Builder Settings",
      "description": "Manage access builder settings for an application"
    },
    {
      "name": "Applications - Advanced Settings",
      "description": "Manage Applications Advanced Settings"
    },
    {
      "name": "Applications - Approvers Groups",
      "description": "Manage approvers groups for association approvers"
    },
    {
      "name": "Applications - Association Approvers",
      "description": "Manage association approvers for an application"
    },
    {
      "name": "Applications - Managed Permissions",
      "description": "Manage Britive Permissions"
    },
    {
      "name": "Applications - Permissions",
      "description": "Manage Application Permissions"
    },
    {
      "name": "Applications - Root Environment Groups",
      "description": "Manage Application Root Environment Groups"
    },
    {
      "name": "Applications - Scans",
      "description": "Manage Application Scans"
    },
    {
      "name": "Audit Log Webhooks",
      "description": "Manage Audit Log Webhooks"
    },
    {
      "name": "Audit Logs(v1 Deprecated)",
      "description": "Manage Audit Logs (Deprecated - use Audit Logs v2 instead)"
    },
    {
      "name": "Audit Logs v2",
      "description": "Manage Audit Logs v2"
    },
    {
      "name": "CSPM Integration",
      "description": "Manage Cloud Security Posture Management (CSPM) tool integrations and their tokens"
    },
    {
      "name": "CSPM Integration - Findings",
      "description": "Discover and fetch CSPM finding data, cross-referenced against Britive applications and profiles"
    },
    {
      "name": "Custom App Template Uploader",
      "description": "Uploads custom app template."
    },
    {
      "name": "Custom App Manager",
      "description": "Creates an app using custom template and other operations for managing the template."
    },
    {
      "name": "Global Landing Page",
      "description": "Manage global landing page"
    },
    {
      "name": "Identity Providers",
      "description": "Manage identity providers and settings"
    },
    {
      "name": "IP Restrictions",
      "description": "Manage firewall rules/settings"
    },
    {
      "name": "ITSM Connection Metadata",
      "description": "Manage ITSM Connection Metadata"
    },
    {
      "name": "ITSM Connections",
      "description": "Manage ITSM Connections"
    },
    {
      "name": "ITSM Integration",
      "description": "Manage ITSM Connections"
    },
    {
      "name": "IM Connection Metadata",
      "description": "Manage IM Connection Metadata"
    },
    {
      "name": "IM Connections",
      "description": "Manage IM Connections"
    },
    {
      "name": "IM Integration",
      "description": "Manage IM Connections"
    },
    {
      "name": "MCP Access Manager",
      "description": "Access MCP servers and check out credentials for their tools"
    },
    {
      "name": "MCP Audit",
      "description": "Submit MCP gateway audit events"
    },
    {
      "name": "MCP Server Tools",
      "description": "Manage the tools exposed by an MCP Server"
    },
    {
      "name": "MCP Servers",
      "description": "Manage MCP Servers"
    },
    {
      "name": "MCP Servers - Policies",
      "description": "Manage MCP Server Policies"
    },
    {
      "name": "Multi Factor Authentication",
      "description": "Manage MFA authentication settings"
    },
    {
      "name": "My Access",
      "description": "Manage My Access"
    },
    {
      "name": "My Devices",
      "description": "Manage My Devices"
    },
    {
      "name": "My Resources",
      "description": "Manage My Resources"
    },
    {
      "name": "My Resources - Integration",
      "description": "Manage My Resource Integration"
    },
    {
      "name": "My Resources - Profiles",
      "description": "Manage My Resource Profiles"
    },
    {
      "name": "Notifications",
      "description": "Manage notifications"
    },
    {
      "name": "Profile Requests - Managed Permissions",
      "description": "Manage Profile Requests Britive Permissions"
    },
    {
      "name": "Reports",
      "description": "Manage Reports"
    },
    {
      "name": "Resource Manager",
      "description": "Manage Resources"
    },
    {
      "name": "Resource Manager - Broker Pool Management",
      "description": "Manage remote broker pools, their tokens, labels, and brokers"
    },
    {
      "name": "Resource Manager - Labels",
      "description": "Manage Resource Labels"
    },
    {
      "name": "Resource Manager - Permissions",
      "description": "Manage Resource Permissions"
    },
    {
      "name": "Resource Manager - Policies",
      "description": "Manage Resource Policies"
    },
    {
      "name": "Resource Manager - Response Templates",
      "description": "Manage Resource Response Templates"
    },
    {
      "name": "Resource Manager - Types",
      "description": "Manage Resource Types"
    },
    {
      "name": "Resource Profiles",
      "description": "Manage Resource Profiles"
    },
    {
      "name": "Resource Profiles - Advanced Settings",
      "description": "Manage Resource Profiles Advanced Settings"
    },
    {
      "name": "Resource Profiles - Associations",
      "description": "Manage Resource Profiles Associations"
    },
    {
      "name": "Resource Profiles - Permissions",
      "description": "Manage Resource Profiles Permissions"
    },
    {
      "name": "Resource Profiles - Policies",
      "description": "Manage Resource Profiles Policies"
    },
    {
      "name": "SAML Configuration",
      "description": "Manage SAML Configuration"
    },
    {
      "name": "Step Up Authentication",
      "description": "Manage service identity association to identity provider"
    },
    {
      "name": "System Announcements",
      "description": "Manage the system announcements"
    },
    {
      "name": "Tag Access Request Settings",
      "description": "Manage access request settings for a user tag"
    },
    {
      "name": "Tag Access Requests",
      "description": "Browse tags available for access request"
    },
    {
      "name": "Task Scheduler",
      "description": "Manage Tasks"
    },
    {
      "name": "User Identity Attributes",
      "description": "Manage User Identity Attributes"
    },
    {
      "name": "User Resources",
      "description": "Manage User Built Resources"
    },
    {
      "name": "User Tags",
      "description": "Manage User Tags"
    },
    {
      "name": "Users, Service Identities and AI Identities",
      "description": "Manage Users, Service Identities and AI Identities"
    },
    {
      "name": "Workload Identity Providers",
      "description": "Manage workload identity providers"
    },
    {
      "name": "Workload SCIM Identity Providers",
      "description": "Manage service identity association to SCIM provisioning for identity provider"
    },
    {
      "name": "Workload Service Identity Providers",
      "description": "Manage service identity association to identity provider"
    },
    {
      "name": "User Tag Owner",
      "description": "Tag Owners manage the tag memberships of their owned tags"
    },
    {
      "name": "Shared Signals - Catalog",
      "description": "Manage shared signals catalog data"
    },
    {
      "name": "Shared Signals - Issuers",
      "description": "Manage shared signals issuers"
    },
    {
      "name": "Shared Signals - Receivers",
      "description": "Manage shared signals receivers"
    },
    {
      "name": "Shared Signals - Results",
      "description": "Query shared signals processing results"
    },
    {
      "name": "ThemesManager",
      "description": "Manage tenant custom theme configurations (public read, admin write)"
    },
    {
      "name": "BrandingManager",
      "description": "Manage tenant branding assets — logos, favicon, right-panel image, brand text (saved/applied lifecycle)"
    }
  ],
  "paths": {
    "/api/cspm/integrations/{name}/rotate": {
      "parameters": [
        {
          "in": "path",
          "name": "name",
          "required": "true",
          "schema": {
            "type": "string"
          },
          "description": "Either the unique, tenant-wide name of the existing integration to rotate, or its generated id (\"cspm-<uuid>\") -- same dual lookup as GET (id tried first, falls back to a name match).\n"
        }
      ],
      "post": {
        "tags": [
          "CSPM Integration"
        ],
        "summary": "Generate a new token for an existing CSPM integration",
        "description": "Generates a fresh cleartext token for an existing integration and replaces the stored one, in place -- the integration's id, name, app, description, and ingest URL are all unchanged, so nothing needs reconfiguring on the CSPM tool's side except the token itself. The old token stops working immediately; the new cleartext token is returned once and never stored. `createdOn` in the response reflects this new token's creation time (it tracks the active token, not the integration record), so admins can tell when a token was last rotated.\n",
        "operationId": "rotateCspmToken",
        "responses": {
          "200": {
            "description": "Token rotated successfully",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/CspmTokenResponse"
                }
              }
            }
          },
          "404": {
            "description": "No integration found with the given name or id"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "CspmTokenResponse": {
        "type": "object",
        "description": "Response returned on integration creation or token rotation -- token is shown only once",
        "required": [
          "app",
          "name",
          "token",
          "ingestUrl"
        ],
        "properties": {
          "app": {
            "type": "string",
            "description": "CSPM application type"
          },
          "name": {
            "type": "string",
            "description": "Unique, tenant-wide name given to this integration at creation"
          },
          "description": {
            "type": "string",
            "description": "Description of this integration"
          },
          "token": {
            "type": "string",
            "description": "Cleartext token -- store securely, will not be shown again"
          },
          "ingestUrl": {
            "type": "string",
            "description": "URL to which CSPM events should be sent (<tenantUrl>/<app>-ingest/<id>)"
          },
          "createdOn": {
            "type": "string",
            "description": "Timestamp when the active token was created. Updated on each rotation -- it tracks the token, not the integration record -- so this reflects when the token was last rotated, not necessarily when the integration itself was first created.\n"
          },
          "actionTemplate": {
            "type": "string",
            "description": "The app's outbound webhook payload/action template, to be pasted as-is into the CSPM tool's own webhook/action configuration. Identical for every integration of a given app type. Absent if the app has no such template.\n"
          }
        }
      }
    },
    "securitySchemes": {
      "bearerAuth": {
        "type": "http",
        "scheme": "bearer"
      }
    }
  }
}
````