---
title: "Rotate a self-host enrollment token"
description: ""
canonical: "https://pgbeam.com/docs/api/platform/rotateSelfHostEnrollment"
last-updated: "2026-09-05T14:02:29.000Z"
---

# Rotate a self-host enrollment token

> 

URL: https://pgbeam.com/docs/api/platform/rotateSelfHostEnrollment

Mints a new enrollment token in place, keeping the same enrollment id, metadata, and expiry. The swap is atomic: the old token stops authenticating new proxy connections the moment this call returns. An already-connected proxy keeps its existing gRPC streams until it disconnects, then must present the new token to reconnect. The new token is returned once and cannot be retrieved again.