curl -X POST https://api.tracklysms.com/api/v2/accounts/children/1042/api-keys/66b0f7c84a1d4b2e9c3a1f2e/rotate \
  -H "X-Api-Key: trk_your_parent_key"

{
  "apiKey": {
    "id": "66c1a8d95b2e4c3f0d4b2e6f",
    "accountId": 1042,
    "name": "prod",
    "key": "trk_zy98xw76vu54ts32rq10po98nm76lk54",
    "keyPrefix": "trk_zy98",
    "status": "active",
    "permissions": ["api.full"],
    "sandbox": false,
    "rotatedFrom": "66b0f7c84a1d4b2e9c3a1f2e",
    "createdAt": "2026-07-26T16:00:00.000000",
    "lastUsedAt": null
  },
  "message": "Store the plaintext key now — it cannot be retrieved later."
}