@unkey/api 2.0.3 → 2.0.4

package/bin/mcp-server.js

@@ -34269,9 +34269,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "2.0.0",
-    sdkVersion: "2.0.3",
-    genVersion: "2.672.0",
-    userAgent: "speakeasy-sdk/typescript 2.0.3 2.672.0 2.0.0 @unkey/api"
+    sdkVersion: "2.0.4",
+    genVersion: "2.683.1",
+    userAgent: "speakeasy-sdk/typescript 2.0.4 2.683.1 2.0.0 @unkey/api"
   };
 });
 
@@ -36814,6 +36814,62 @@ var init_v2keysremoverolesresponsebody = __esm(() => {
   })(V2KeysRemoveRolesResponseBody$ ||= {});
 });
 
+// src/models/components/v2keysrerollkeyrequestbody.ts
+var V2KeysRerollKeyRequestBody$inboundSchema, V2KeysRerollKeyRequestBody$outboundSchema, V2KeysRerollKeyRequestBody$;
+var init_v2keysrerollkeyrequestbody = __esm(() => {
+  init_zod();
+  V2KeysRerollKeyRequestBody$inboundSchema = objectType({
+    keyId: stringType(),
+    expiration: numberType().int()
+  });
+  V2KeysRerollKeyRequestBody$outboundSchema = objectType({
+    keyId: stringType(),
+    expiration: numberType().int()
+  });
+  ((V2KeysRerollKeyRequestBody$) => {
+    V2KeysRerollKeyRequestBody$.inboundSchema = V2KeysRerollKeyRequestBody$inboundSchema;
+    V2KeysRerollKeyRequestBody$.outboundSchema = V2KeysRerollKeyRequestBody$outboundSchema;
+  })(V2KeysRerollKeyRequestBody$ ||= {});
+});
+
+// src/models/components/v2keysrerollkeyresponsedata.ts
+var V2KeysRerollKeyResponseData$inboundSchema, V2KeysRerollKeyResponseData$outboundSchema, V2KeysRerollKeyResponseData$;
+var init_v2keysrerollkeyresponsedata = __esm(() => {
+  init_zod();
+  V2KeysRerollKeyResponseData$inboundSchema = objectType({
+    keyId: stringType(),
+    key: stringType()
+  });
+  V2KeysRerollKeyResponseData$outboundSchema = objectType({
+    keyId: stringType(),
+    key: stringType()
+  });
+  ((V2KeysRerollKeyResponseData$) => {
+    V2KeysRerollKeyResponseData$.inboundSchema = V2KeysRerollKeyResponseData$inboundSchema;
+    V2KeysRerollKeyResponseData$.outboundSchema = V2KeysRerollKeyResponseData$outboundSchema;
+  })(V2KeysRerollKeyResponseData$ ||= {});
+});
+
+// src/models/components/v2keysrerollkeyresponsebody.ts
+var V2KeysRerollKeyResponseBody$inboundSchema, V2KeysRerollKeyResponseBody$outboundSchema, V2KeysRerollKeyResponseBody$;
+var init_v2keysrerollkeyresponsebody = __esm(() => {
+  init_zod();
+  init_meta();
+  init_v2keysrerollkeyresponsedata();
+  V2KeysRerollKeyResponseBody$inboundSchema = objectType({
+    meta: Meta$inboundSchema,
+    data: V2KeysRerollKeyResponseData$inboundSchema
+  });
+  V2KeysRerollKeyResponseBody$outboundSchema = objectType({
+    meta: Meta$outboundSchema,
+    data: V2KeysRerollKeyResponseData$outboundSchema
+  });
+  ((V2KeysRerollKeyResponseBody$) => {
+    V2KeysRerollKeyResponseBody$.inboundSchema = V2KeysRerollKeyResponseBody$inboundSchema;
+    V2KeysRerollKeyResponseBody$.outboundSchema = V2KeysRerollKeyResponseBody$outboundSchema;
+  })(V2KeysRerollKeyResponseBody$ ||= {});
+});
+
 // src/models/components/v2keyssetpermissionsrequestbody.ts
 var V2KeysSetPermissionsRequestBody$inboundSchema, V2KeysSetPermissionsRequestBody$outboundSchema, V2KeysSetPermissionsRequestBody$;
 var init_v2keyssetpermissionsrequestbody = __esm(() => {
@@ -37814,6 +37870,9 @@ var init_components = __esm(() => {
   init_v2keysremovepermissionsresponsebody();
   init_v2keysremoverolesrequestbody();
   init_v2keysremoverolesresponsebody();
+  init_v2keysrerollkeyrequestbody();
+  init_v2keysrerollkeyresponsebody();
+  init_v2keysrerollkeyresponsedata();
   init_v2keyssetpermissionsrequestbody();
   init_v2keyssetpermissionsresponsebody();
   init_v2keyssetrolesrequestbody();
@@ -40269,11 +40328,155 @@ Invalidates the key cache for immediate effect, and makes role changes available
   };
 });
 
-// src/funcs/keysSetPermissions.ts
-function keysSetPermissions(client, request, options) {
+// src/funcs/keysRerollKey.ts
+function keysRerollKey(client, request, options) {
   return new APIPromise($do17(client, request, options));
 }
 async function $do17(client, request, options) {
+  const parsed = safeParse(request, (value) => V2KeysRerollKeyRequestBody$outboundSchema.parse(value), "Input validation failed");
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+  const path = pathToFunc("/v2/keys.rerollKey")();
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json"
+  }));
+  const secConfig = await extractSecurity(client._options.rootKey);
+  const securityInput = secConfig == null ? {} : { rootKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "rerollKey",
+    oAuth2Scopes: [],
+    resolvedSecurity: requestSecurity,
+    securitySource: client._options.rootKey,
+    retryConfig: options?.retries || client._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 50,
+        maxInterval: 1000,
+        exponent: 1.5,
+        maxElapsedTime: 1e4
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || ["5XX"]
+  };
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path,
+    headers,
+    body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+  const doResult = await client._do(req, {
+    context,
+    errorCodes: ["400", "401", "403", "404", "4XX", "500", "5XX"],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req }
+  };
+  const [result] = await match(json(200, V2KeysRerollKeyResponseBody$inboundSchema), jsonErr(400, BadRequestErrorResponse$inboundSchema), jsonErr(401, UnauthorizedErrorResponse$inboundSchema), jsonErr(403, ForbiddenErrorResponse$inboundSchema), jsonErr(404, NotFoundErrorResponse$inboundSchema), jsonErr(500, InternalServerErrorResponse$inboundSchema), fail("4XX"), fail("5XX"))(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+  return [result, { status: "complete", request: req, response }];
+}
+var init_keysRerollKey = __esm(() => {
+  init_encodings();
+  init_matchers();
+  init_primitives();
+  init_schemas();
+  init_security();
+  init_url();
+  init_components();
+  init_errors2();
+  init_async();
+});
+
+// src/mcp-server/tools/keysRerollKey.ts
+var args17, tool$keysRerollKey;
+var init_keysRerollKey2 = __esm(() => {
+  init_keysRerollKey();
+  init_components();
+  init_tools();
+  args17 = {
+    request: V2KeysRerollKeyRequestBody$inboundSchema
+  };
+  tool$keysRerollKey = {
+    name: "keys-reroll-key",
+    description: `Reroll Key
+
+Generate a new API key while preserving the configuration from an existing key.
+
+This operation creates a fresh key with a new token while maintaining all settings from the original key:
+- Permissions and roles
+- Custom metadata
+- Rate limit configurations
+- Identity associations
+- Remaining credits
+- Recovery settings
+
+**Key Generation:**
+- The system attempts to extract the prefix from the original key
+- If prefix extraction fails, the default API prefix is used
+- Key length follows the API's default byte configuration (or 16 bytes if not specified)
+
+**Original Key Handling:**
+- The original key will be revoked after the duration specified in \`expiration\`
+- Set \`expiration\` to 0 to revoke immediately
+- This allows for graceful key rotation with an overlap period
+
+Common use cases include:
+- Rotating keys for security compliance
+- Issuing replacement keys for compromised credentials
+- Creating backup keys with identical permissions
+
+**Important:** Analytics and usage metrics are tracked at both the key level AND identity level. If the original key has an identity, the new key will inherit it, allowing you to track usage across both individual keys and the overall identity.
+
+**Required Permissions**
+
+ Your root key must have:
+ - \`api.*.create_key\` or \`api.<api_id>.create_key\`
+ - \`api.*.encrypt_key\` or \`api.<api_id>.encrypt_key\` (only when the original key is recoverable)
+`,
+    args: args17,
+    tool: async (client, args18, ctx) => {
+      const [result, apiCall] = await keysRerollKey(client, args18.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      const value = result.value;
+      return formatResult(value, apiCall);
+    }
+  };
+});
+
+// src/funcs/keysSetPermissions.ts
+function keysSetPermissions(client, request, options) {
+  return new APIPromise($do18(client, request, options));
+}
+async function $do18(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysSetPermissionsRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40353,12 +40556,12 @@ var init_keysSetPermissions = __esm(() => {
 });
 
 // src/mcp-server/tools/keysSetPermissions.ts
-var args17, tool$keysSetPermissions;
+var args18, tool$keysSetPermissions;
 var init_keysSetPermissions2 = __esm(() => {
   init_keysSetPermissions();
   init_components();
   init_tools();
-  args17 = {
+  args18 = {
     request: V2KeysSetPermissionsRequestBody$inboundSchema
   };
   tool$keysSetPermissions = {
@@ -40381,9 +40584,9 @@ Your root key must have one of the following permissions:
 
 Invalidates the key cache for immediate effect, and makes permission changes available for verification within 30 seconds across all regions.
 `,
-    args: args17,
-    tool: async (client, args18, ctx) => {
-      const [result, apiCall] = await keysSetPermissions(client, args18.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args18,
+    tool: async (client, args19, ctx) => {
+      const [result, apiCall] = await keysSetPermissions(client, args19.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -40398,9 +40601,9 @@ Invalidates the key cache for immediate effect, and makes permission changes ava
 
 // src/funcs/keysSetRoles.ts
 function keysSetRoles(client, request, options) {
-  return new APIPromise($do18(client, request, options));
+  return new APIPromise($do19(client, request, options));
 }
-async function $do18(client, request, options) {
+async function $do19(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysSetRolesRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40480,12 +40683,12 @@ var init_keysSetRoles = __esm(() => {
 });
 
 // src/mcp-server/tools/keysSetRoles.ts
-var args18, tool$keysSetRoles;
+var args19, tool$keysSetRoles;
 var init_keysSetRoles2 = __esm(() => {
   init_keysSetRoles();
   init_components();
   init_tools();
-  args18 = {
+  args19 = {
     request: V2KeysSetRolesRequestBody$inboundSchema
   };
   tool$keysSetRoles = {
@@ -40508,9 +40711,9 @@ Your root key must have one of the following permissions:
 
 Invalidates the key cache for immediate effect, and makes role changes available for verification within 30 seconds across all regions.
 `,
-    args: args18,
-    tool: async (client, args19, ctx) => {
-      const [result, apiCall] = await keysSetRoles(client, args19.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args19,
+    tool: async (client, args20, ctx) => {
+      const [result, apiCall] = await keysSetRoles(client, args20.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -40525,9 +40728,9 @@ Invalidates the key cache for immediate effect, and makes role changes available
 
 // src/funcs/keysUpdateCredits.ts
 function keysUpdateCredits(client, request, options) {
-  return new APIPromise($do19(client, request, options));
+  return new APIPromise($do20(client, request, options));
 }
-async function $do19(client, request, options) {
+async function $do20(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysUpdateCreditsRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40607,12 +40810,12 @@ var init_keysUpdateCredits = __esm(() => {
 });
 
 // src/mcp-server/tools/keysUpdateCredits.ts
-var args19, tool$keysUpdateCredits;
+var args20, tool$keysUpdateCredits;
 var init_keysUpdateCredits2 = __esm(() => {
   init_keysUpdateCredits();
   init_components();
   init_tools();
-  args19 = {
+  args20 = {
     request: V2KeysUpdateCreditsRequestBody$inboundSchema
   };
   tool$keysUpdateCredits = {
@@ -40635,9 +40838,9 @@ Your root key must have one of the following permissions:
 
 Credit updates remove the key from cache immediately. Setting credits to unlimited automatically clears any existing refill settings. Changes take effect instantly but may take up to 30 seconds to propagate to all edge regions.
 `,
-    args: args19,
-    tool: async (client, args20, ctx) => {
-      const [result, apiCall] = await keysUpdateCredits(client, args20.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args20,
+    tool: async (client, args21, ctx) => {
+      const [result, apiCall] = await keysUpdateCredits(client, args21.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -40652,9 +40855,9 @@ Credit updates remove the key from cache immediately. Setting credits to unlimit
 
 // src/funcs/keysUpdateKey.ts
 function keysUpdateKey(client, request, options) {
-  return new APIPromise($do20(client, request, options));
+  return new APIPromise($do21(client, request, options));
 }
-async function $do20(client, request, options) {
+async function $do21(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysUpdateKeyRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40734,12 +40937,12 @@ var init_keysUpdateKey = __esm(() => {
 });
 
 // src/mcp-server/tools/keysUpdateKey.ts
-var args20, tool$keysUpdateKey;
+var args21, tool$keysUpdateKey;
 var init_keysUpdateKey2 = __esm(() => {
   init_keysUpdateKey();
   init_components();
   init_tools();
-  args20 = {
+  args21 = {
     request: V2KeysUpdateKeyRequestBody$inboundSchema
   };
   tool$keysUpdateKey = {
@@ -40762,9 +40965,9 @@ Your root key must have one of the following permissions:
 
 If you specify an \`externalId\` that doesn't exist, a new identity will be automatically created and linked to the key. Permission updates will auto-create any permissions that don't exist in your workspace. Changes take effect immediately but may take up to 30 seconds to propagate to all edge regions due to cache invalidation.
 `,
-    args: args20,
-    tool: async (client, args21, ctx) => {
-      const [result, apiCall] = await keysUpdateKey(client, args21.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args21,
+    tool: async (client, args22, ctx) => {
+      const [result, apiCall] = await keysUpdateKey(client, args22.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -40779,9 +40982,9 @@ If you specify an \`externalId\` that doesn't exist, a new identity will be auto
 
 // src/funcs/keysVerifyKey.ts
 function keysVerifyKey(client, request, options) {
-  return new APIPromise($do21(client, request, options));
+  return new APIPromise($do22(client, request, options));
 }
-async function $do21(client, request, options) {
+async function $do22(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysVerifyKeyRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40861,12 +41064,12 @@ var init_keysVerifyKey = __esm(() => {
 });
 
 // src/mcp-server/tools/keysVerifyKey.ts
-var args21, tool$keysVerifyKey;
+var args22, tool$keysVerifyKey;
 var init_keysVerifyKey2 = __esm(() => {
   init_keysVerifyKey();
   init_components();
   init_tools();
-  args21 = {
+  args22 = {
     request: V2KeysVerifyKeyRequestBody$inboundSchema
   };
   tool$keysVerifyKey = {
@@ -40892,9 +41095,9 @@ Your root key needs one of:
 
 If you are getting a NOT_FOUND error, ensure your root key has the required verify key permissions.
 `,
-    args: args21,
-    tool: async (client, args22, ctx) => {
-      const [result, apiCall] = await keysVerifyKey(client, args22.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args22,
+    tool: async (client, args23, ctx) => {
+      const [result, apiCall] = await keysVerifyKey(client, args23.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -40909,9 +41112,9 @@ If you are getting a NOT_FOUND error, ensure your root key has the required veri
 
 // src/funcs/keysWhoami.ts
 function keysWhoami(client, request, options) {
-  return new APIPromise($do22(client, request, options));
+  return new APIPromise($do23(client, request, options));
 }
-async function $do22(client, request, options) {
+async function $do23(client, request, options) {
   const parsed = safeParse(request, (value) => V2KeysWhoamiRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -40991,12 +41194,12 @@ var init_keysWhoami = __esm(() => {
 });
 
 // src/mcp-server/tools/keysWhoami.ts
-var args22, tool$keysWhoami;
+var args23, tool$keysWhoami;
 var init_keysWhoami2 = __esm(() => {
   init_keysWhoami();
   init_components();
   init_tools();
-  args22 = {
+  args23 = {
     request: V2KeysWhoamiRequestBody$inboundSchema
   };
   tool$keysWhoami = {
@@ -41013,9 +41216,9 @@ Your root key must have one of the following permissions for basic key informati
 
 If your rootkey lacks permissions but the key exists, we may return a 404 status here to prevent leaking the existance of a key to unauthorized clients. If you believe that a key should exist, but receive a 404, please double check your root key has the correct permissions.
 `,
-    args: args22,
-    tool: async (client, args23, ctx) => {
-      const [result, apiCall] = await keysWhoami(client, args23.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args23,
+    tool: async (client, args24, ctx) => {
+      const [result, apiCall] = await keysWhoami(client, args24.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41030,9 +41233,9 @@ If your rootkey lacks permissions but the key exists, we may return a 404 status
 
 // src/funcs/permissionsCreatePermission.ts
 function permissionsCreatePermission(client, request, options) {
-  return new APIPromise($do23(client, request, options));
+  return new APIPromise($do24(client, request, options));
 }
-async function $do23(client, request, options) {
+async function $do24(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsCreatePermissionRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41112,12 +41315,12 @@ var init_permissionsCreatePermission = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsCreatePermission.ts
-var args23, tool$permissionsCreatePermission;
+var args24, tool$permissionsCreatePermission;
 var init_permissionsCreatePermission2 = __esm(() => {
   init_permissionsCreatePermission();
   init_components();
   init_tools();
-  args23 = {
+  args24 = {
     request: V2PermissionsCreatePermissionRequestBody$inboundSchema
   };
   tool$permissionsCreatePermission = {
@@ -41135,9 +41338,9 @@ Use hierarchical naming patterns like \`documents.read\`, \`admin.users.delete\`
 Your root key must have the following permission:
 - \`rbac.*.create_permission\`
 `,
-    args: args23,
-    tool: async (client, args24, ctx) => {
-      const [result, apiCall] = await permissionsCreatePermission(client, args24.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args24,
+    tool: async (client, args25, ctx) => {
+      const [result, apiCall] = await permissionsCreatePermission(client, args25.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41152,9 +41355,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsCreateRole.ts
 function permissionsCreateRole(client, request, options) {
-  return new APIPromise($do24(client, request, options));
+  return new APIPromise($do25(client, request, options));
 }
-async function $do24(client, request, options) {
+async function $do25(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsCreateRoleRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41234,12 +41437,12 @@ var init_permissionsCreateRole = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsCreateRole.ts
-var args24, tool$permissionsCreateRole;
+var args25, tool$permissionsCreateRole;
 var init_permissionsCreateRole2 = __esm(() => {
   init_permissionsCreateRole();
   init_components();
   init_tools();
-  args24 = {
+  args25 = {
     request: V2PermissionsCreateRoleRequestBody$inboundSchema
   };
   tool$permissionsCreateRole = {
@@ -41255,9 +41458,9 @@ Create a new role to group related permissions for easier management. Roles enab
 Your root key must have the following permission:
 - \`rbac.*.create_role\`
 `,
-    args: args24,
-    tool: async (client, args25, ctx) => {
-      const [result, apiCall] = await permissionsCreateRole(client, args25.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args25,
+    tool: async (client, args26, ctx) => {
+      const [result, apiCall] = await permissionsCreateRole(client, args26.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41272,9 +41475,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsDeletePermission.ts
 function permissionsDeletePermission(client, request, options) {
-  return new APIPromise($do25(client, request, options));
+  return new APIPromise($do26(client, request, options));
 }
-async function $do25(client, request, options) {
+async function $do26(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsDeletePermissionRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41354,12 +41557,12 @@ var init_permissionsDeletePermission = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsDeletePermission.ts
-var args25, tool$permissionsDeletePermission;
+var args26, tool$permissionsDeletePermission;
 var init_permissionsDeletePermission2 = __esm(() => {
   init_permissionsDeletePermission();
   init_components();
   init_tools();
-  args25 = {
+  args26 = {
     request: V2PermissionsDeletePermissionRequestBody$inboundSchema
   };
   tool$permissionsDeletePermission = {
@@ -41375,9 +41578,9 @@ Remove a permission from your workspace. This also removes the permission from a
 Your root key must have the following permission:
 - \`rbac.*.delete_permission\`
 `,
-    args: args25,
-    tool: async (client, args26, ctx) => {
-      const [result, apiCall] = await permissionsDeletePermission(client, args26.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args26,
+    tool: async (client, args27, ctx) => {
+      const [result, apiCall] = await permissionsDeletePermission(client, args27.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41392,9 +41595,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsDeleteRole.ts
 function permissionsDeleteRole(client, request, options) {
-  return new APIPromise($do26(client, request, options));
+  return new APIPromise($do27(client, request, options));
 }
-async function $do26(client, request, options) {
+async function $do27(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsDeleteRoleRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41474,12 +41677,12 @@ var init_permissionsDeleteRole = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsDeleteRole.ts
-var args26, tool$permissionsDeleteRole;
+var args27, tool$permissionsDeleteRole;
 var init_permissionsDeleteRole2 = __esm(() => {
   init_permissionsDeleteRole();
   init_components();
   init_tools();
-  args26 = {
+  args27 = {
     request: V2PermissionsDeleteRoleRequestBody$inboundSchema
   };
   tool$permissionsDeleteRole = {
@@ -41495,9 +41698,9 @@ Remove a role from your workspace. This also removes the role from all assigned
 Your root key must have the following permission:
 - \`rbac.*.delete_role\`
 `,
-    args: args26,
-    tool: async (client, args27, ctx) => {
-      const [result, apiCall] = await permissionsDeleteRole(client, args27.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args27,
+    tool: async (client, args28, ctx) => {
+      const [result, apiCall] = await permissionsDeleteRole(client, args28.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41512,9 +41715,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsGetPermission.ts
 function permissionsGetPermission(client, request, options) {
-  return new APIPromise($do27(client, request, options));
+  return new APIPromise($do28(client, request, options));
 }
-async function $do27(client, request, options) {
+async function $do28(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsGetPermissionRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41594,12 +41797,12 @@ var init_permissionsGetPermission = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsGetPermission.ts
-var args27, tool$permissionsGetPermission;
+var args28, tool$permissionsGetPermission;
 var init_permissionsGetPermission2 = __esm(() => {
   init_permissionsGetPermission();
   init_components();
   init_tools();
-  args27 = {
+  args28 = {
     request: V2PermissionsGetPermissionRequestBody$inboundSchema
   };
   tool$permissionsGetPermission = {
@@ -41613,9 +41816,9 @@ Retrieve details about a specific permission including its name, description, an
 Your root key must have the following permission:
 - \`rbac.*.read_permission\`
 `,
-    args: args27,
-    tool: async (client, args28, ctx) => {
-      const [result, apiCall] = await permissionsGetPermission(client, args28.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args28,
+    tool: async (client, args29, ctx) => {
+      const [result, apiCall] = await permissionsGetPermission(client, args29.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41630,9 +41833,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsGetRole.ts
 function permissionsGetRole(client, request, options) {
-  return new APIPromise($do28(client, request, options));
+  return new APIPromise($do29(client, request, options));
 }
-async function $do28(client, request, options) {
+async function $do29(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsGetRoleRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41712,12 +41915,12 @@ var init_permissionsGetRole = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsGetRole.ts
-var args28, tool$permissionsGetRole;
+var args29, tool$permissionsGetRole;
 var init_permissionsGetRole2 = __esm(() => {
   init_permissionsGetRole();
   init_components();
   init_tools();
-  args28 = {
+  args29 = {
     request: V2PermissionsGetRoleRequestBody$inboundSchema
   };
   tool$permissionsGetRole = {
@@ -41731,9 +41934,9 @@ Retrieve details about a specific role including its assigned permissions.
 Your root key must have the following permission:
 - \`rbac.*.read_role\`
 `,
-    args: args28,
-    tool: async (client, args29, ctx) => {
-      const [result, apiCall] = await permissionsGetRole(client, args29.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args29,
+    tool: async (client, args30, ctx) => {
+      const [result, apiCall] = await permissionsGetRole(client, args30.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41748,9 +41951,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsListPermissions.ts
 function permissionsListPermissions(client, request, options) {
-  return new APIPromise($do29(client, request, options));
+  return new APIPromise($do30(client, request, options));
 }
-async function $do29(client, request, options) {
+async function $do30(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsListPermissionsRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41830,28 +42033,29 @@ var init_permissionsListPermissions = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsListPermissions.ts
-var args29, tool$permissionsListPermissions;
+var args30, tool$permissionsListPermissions;
 var init_permissionsListPermissions2 = __esm(() => {
   init_permissionsListPermissions();
   init_components();
   init_tools();
-  args29 = {
+  args30 = {
     request: V2PermissionsListPermissionsRequestBody$inboundSchema
   };
   tool$permissionsListPermissions = {
     name: "permissions-list-permissions",
     description: `List permissions
 
-Retrieve all permissions in your workspace. Results are paginated and sorted alphabetically by permission name.
+Retrieve all permissions in your workspace. 
+Results are paginated and sorted by their id.
 
 **Required Permissions**
 
 Your root key must have the following permission:
 - \`rbac.*.read_permission\`
 `,
-    args: args29,
-    tool: async (client, args30, ctx) => {
-      const [result, apiCall] = await permissionsListPermissions(client, args30.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args30,
+    tool: async (client, args31, ctx) => {
+      const [result, apiCall] = await permissionsListPermissions(client, args31.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41866,9 +42070,9 @@ Your root key must have the following permission:
 
 // src/funcs/permissionsListRoles.ts
 function permissionsListRoles(client, request, options) {
-  return new APIPromise($do30(client, request, options));
+  return new APIPromise($do31(client, request, options));
 }
-async function $do30(client, request, options) {
+async function $do31(client, request, options) {
   const parsed = safeParse(request, (value) => V2PermissionsListRolesRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -41948,28 +42152,29 @@ var init_permissionsListRoles = __esm(() => {
 });
 
 // src/mcp-server/tools/permissionsListRoles.ts
-var args30, tool$permissionsListRoles;
+var args31, tool$permissionsListRoles;
 var init_permissionsListRoles2 = __esm(() => {
   init_permissionsListRoles();
   init_components();
   init_tools();
-  args30 = {
+  args31 = {
     request: V2PermissionsListRolesRequestBody$inboundSchema
   };
   tool$permissionsListRoles = {
     name: "permissions-list-roles",
     description: `List roles
 
-Retrieve all roles in your workspace including their assigned permissions. Results are paginated and sorted alphabetically by role name.
+Retrieve all roles in your workspace including their assigned permissions. 
+Results are paginated and sorted by their id.
 
 **Required Permissions**
 
 Your root key must have the following permission:
 - \`rbac.*.read_role\`
 `,
-    args: args30,
-    tool: async (client, args31, ctx) => {
-      const [result, apiCall] = await permissionsListRoles(client, args31.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args31,
+    tool: async (client, args32, ctx) => {
+      const [result, apiCall] = await permissionsListRoles(client, args32.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -41984,9 +42189,9 @@ Your root key must have the following permission:
 
 // src/funcs/ratelimitDeleteOverride.ts
 function ratelimitDeleteOverride(client, request, options) {
-  return new APIPromise($do31(client, request, options));
+  return new APIPromise($do32(client, request, options));
 }
-async function $do31(client, request, options) {
+async function $do32(client, request, options) {
   const parsed = safeParse(request, (value) => V2RatelimitDeleteOverrideRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -42066,12 +42271,12 @@ var init_ratelimitDeleteOverride = __esm(() => {
 });
 
 // src/mcp-server/tools/ratelimitDeleteOverride.ts
-var args31, tool$ratelimitDeleteOverride;
+var args32, tool$ratelimitDeleteOverride;
 var init_ratelimitDeleteOverride2 = __esm(() => {
   init_ratelimitDeleteOverride();
   init_components();
   init_tools();
-  args31 = {
+  args32 = {
     request: V2RatelimitDeleteOverrideRequestBody$inboundSchema
   };
   tool$ratelimitDeleteOverride = {
@@ -42086,9 +42291,9 @@ Use this to remove temporary overrides, reset identifiers to standard limits, or
 
 **Permissions:** Requires \`ratelimit.*.delete_override\` or \`ratelimit.<namespace_id>.delete_override\`
 `,
-    args: args31,
-    tool: async (client, args32, ctx) => {
-      const [result, apiCall] = await ratelimitDeleteOverride(client, args32.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args32,
+    tool: async (client, args33, ctx) => {
+      const [result, apiCall] = await ratelimitDeleteOverride(client, args33.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -42103,9 +42308,9 @@ Use this to remove temporary overrides, reset identifiers to standard limits, or
 
 // src/funcs/ratelimitGetOverride.ts
 function ratelimitGetOverride(client, request, options) {
-  return new APIPromise($do32(client, request, options));
+  return new APIPromise($do33(client, request, options));
 }
-async function $do32(client, request, options) {
+async function $do33(client, request, options) {
   const parsed = safeParse(request, (value) => V2RatelimitGetOverrideRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -42185,12 +42390,12 @@ var init_ratelimitGetOverride = __esm(() => {
 });
 
 // src/mcp-server/tools/ratelimitGetOverride.ts
-var args32, tool$ratelimitGetOverride;
+var args33, tool$ratelimitGetOverride;
 var init_ratelimitGetOverride2 = __esm(() => {
   init_ratelimitGetOverride();
   init_components();
   init_tools();
-  args32 = {
+  args33 = {
     request: V2RatelimitGetOverrideRequestBody$inboundSchema
   };
   tool$ratelimitGetOverride = {
@@ -42205,9 +42410,9 @@ Use this to inspect override configurations, audit rate limiting policies, or de
 
 **Permissions:** Requires \`ratelimit.*.read_override\` or \`ratelimit.<namespace_id>.read_override\`
 `,
-    args: args32,
-    tool: async (client, args33, ctx) => {
-      const [result, apiCall] = await ratelimitGetOverride(client, args33.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args33,
+    tool: async (client, args34, ctx) => {
+      const [result, apiCall] = await ratelimitGetOverride(client, args34.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -42222,9 +42427,9 @@ Use this to inspect override configurations, audit rate limiting policies, or de
 
 // src/funcs/ratelimitLimit.ts
 function ratelimitLimit(client, request, options) {
-  return new APIPromise($do33(client, request, options));
+  return new APIPromise($do34(client, request, options));
 }
-async function $do33(client, request, options) {
+async function $do34(client, request, options) {
   const parsed = safeParse(request, (value) => V2RatelimitLimitRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -42304,12 +42509,12 @@ var init_ratelimitLimit = __esm(() => {
 });
 
 // src/mcp-server/tools/ratelimitLimit.ts
-var args33, tool$ratelimitLimit;
+var args34, tool$ratelimitLimit;
 var init_ratelimitLimit2 = __esm(() => {
   init_ratelimitLimit();
   init_components();
   init_tools();
-  args33 = {
+  args34 = {
     request: V2RatelimitLimitRequestBody$inboundSchema
   };
   tool$ratelimitLimit = {
@@ -42332,9 +42537,9 @@ Your root key must have one of the following permissions:
 
 Records rate limit metrics for analytics and monitoring, updates rate limit counters with sliding window algorithm, and optionally triggers override matching for custom limits.
 `,
-    args: args33,
-    tool: async (client, args34, ctx) => {
-      const [result, apiCall] = await ratelimitLimit(client, args34.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args34,
+    tool: async (client, args35, ctx) => {
+      const [result, apiCall] = await ratelimitLimit(client, args35.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -42349,9 +42554,9 @@ Records rate limit metrics for analytics and monitoring, updates rate limit coun
 
 // src/funcs/ratelimitListOverrides.ts
 function ratelimitListOverrides(client, request, options) {
-  return new APIPromise($do34(client, request, options));
+  return new APIPromise($do35(client, request, options));
 }
-async function $do34(client, request, options) {
+async function $do35(client, request, options) {
   const parsed = safeParse(request, (value) => V2RatelimitListOverridesRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -42431,12 +42636,12 @@ var init_ratelimitListOverrides = __esm(() => {
 });
 
 // src/mcp-server/tools/ratelimitListOverrides.ts
-var args34, tool$ratelimitListOverrides;
+var args35, tool$ratelimitListOverrides;
 var init_ratelimitListOverrides2 = __esm(() => {
   init_ratelimitListOverrides();
   init_components();
   init_tools();
-  args34 = {
+  args35 = {
     request: V2RatelimitListOverridesRequestBody$inboundSchema
   };
   tool$ratelimitListOverrides = {
@@ -42451,9 +42656,9 @@ Use this to audit rate limiting policies, build admin dashboards, or manage over
 
 **Permissions:** Requires \`ratelimit.*.read_override\` or \`ratelimit.<namespace_id>.read_override\`
 `,
-    args: args34,
-    tool: async (client, args35, ctx) => {
-      const [result, apiCall] = await ratelimitListOverrides(client, args35.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args35,
+    tool: async (client, args36, ctx) => {
+      const [result, apiCall] = await ratelimitListOverrides(client, args36.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -42468,9 +42673,9 @@ Use this to audit rate limiting policies, build admin dashboards, or manage over
 
 // src/funcs/ratelimitSetOverride.ts
 function ratelimitSetOverride(client, request, options) {
-  return new APIPromise($do35(client, request, options));
+  return new APIPromise($do36(client, request, options));
 }
-async function $do35(client, request, options) {
+async function $do36(client, request, options) {
   const parsed = safeParse(request, (value) => V2RatelimitSetOverrideRequestBody$outboundSchema.parse(value), "Input validation failed");
   if (!parsed.ok) {
     return [parsed, { status: "invalid" }];
@@ -42550,12 +42755,12 @@ var init_ratelimitSetOverride = __esm(() => {
 });
 
 // src/mcp-server/tools/ratelimitSetOverride.ts
-var args35, tool$ratelimitSetOverride;
+var args36, tool$ratelimitSetOverride;
 var init_ratelimitSetOverride2 = __esm(() => {
   init_ratelimitSetOverride();
   init_components();
   init_tools();
-  args35 = {
+  args36 = {
     request: V2RatelimitSetOverrideRequestBody$inboundSchema
   };
   tool$ratelimitSetOverride = {
@@ -42570,9 +42775,9 @@ Use this to create premium tiers with higher limits, apply stricter limits to sp
 
 **Permissions:** Requires \`ratelimit.*.set_override\` or \`ratelimit.<namespace_id>.set_override\`
 `,
-    args: args35,
-    tool: async (client, args36, ctx) => {
-      const [result, apiCall] = await ratelimitSetOverride(client, args36.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+    args: args36,
+    tool: async (client, args37, ctx) => {
+      const [result, apiCall] = await ratelimitSetOverride(client, args37.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
       if (!result.ok) {
         return {
           content: [{ type: "text", text: result.error.message }],
@@ -42589,7 +42794,7 @@ Use this to create premium tiers with higher limits, apply stricter limits to sp
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "Unkey",
-    version: "2.0.3"
+    version: "2.0.4"
   });
   const client = new UnkeyCore({
     rootKey: deps.rootKey,
@@ -42619,6 +42824,7 @@ function createMCPServer(deps) {
   tool(tool$keysGetKey);
   tool(tool$keysRemovePermissions);
   tool(tool$keysRemoveRoles);
+  tool(tool$keysRerollKey);
   tool(tool$keysSetPermissions);
   tool(tool$keysSetRoles);
   tool(tool$keysUpdateCredits);
@@ -42661,6 +42867,7 @@ var init_server2 = __esm(() => {
   init_keysGetKey2();
   init_keysRemovePermissions2();
   init_keysRemoveRoles2();
+  init_keysRerollKey2();
   init_keysSetPermissions2();
   init_keysSetRoles2();
   init_keysUpdateCredits2();
@@ -43875,7 +44082,7 @@ var routes = ln({
 var app = _e(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "2.0.3"
+    currentVersion: "2.0.4"
   }
 });
 Yt(app, process3.argv.slice(2), buildContext(process3));
@@ -43883,5 +44090,5 @@ export {
   app
 };
 
-//# debugId=3661F440CC19596D64756E2164756E21
+//# debugId=99890DFCB79E3EA364756E2164756E21
 //# sourceMappingURL=mcp-server.js.map