Stream - Rotate Stream broadcast keys for live inputs
- Announced
- Tags
- Stream
- Severity
- info, set by
reef/rss-rule-v1 - Source
- https://developers.cloudflare.com/changelog/post/2026-07-30-rotate-stream-broadcast-keys/
<p>You can now rotate the broadcast credentials for a Stream live input without changing the live input identifier.</p> <p>Use key rotation when live input credentials may have been shared with the wrong audience, exposed in client code or a screenshare, or need to be refreshed as part of your security process. Rotating keys revokes the old credentials, disconnects broadcasts using stale credentials, and returns refreshed credentials in the API response.</p> <p>To rotate keys for a live input, make a <code>POST</code> request to the <code>rotate_keys</code> endpoint:</p> <figure class="nb-code-figure" data-nb-lang="bash"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="bash" data-nb-lang="bash"><code><span class="line"><span class="nb-shiki-1t8gfj">curl</span><span class="nb-shiki-dzsirb"> --request</span><span class="nb-shiki-mdbnqw"> POST</span><span class="nb-shiki-dzsirb"> \</span></span> <span class="line"><span class="nb-shiki-140thh">https://api.cloudflare.com/client/v4/accounts/{</span><span class="nb-shiki-1t8gfj">account_id}/stream/live_inputs/</span><span class="nb-shiki-mdbnqw">{live_input_identifier}</span><span class="nb-shiki-1t8gfj">/rotate_keys</span><span class="nb-shiki-dzsirb"> \</span></span> <span class="line"><span class="nb-shiki-140thh">--header </span><span class="nb-shiki-mdbnqw">"Authorization: Bearer <API_TOKEN>"</span></span></code></pre></figure> <p>Live input responses now also include <code>keysRotatedAt</code>, which indicates when the live input keys were last rotated. This field is omitted for live inputs whose keys have never been rotated.</p> <p>For endpoint details, refer to <a href="https://developers.cloudflare.com/api/resources/stream/subresources/live_inputs/methods/rotate_keys/">Rotate keys for a live input</a>. For usage guidance, refer to <a href="https://developers.cloudflare.com/stream/stream-live/start-stream-live/#manage-live-inputs">Manage live inputs</a>.</p>
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.