List the organizations (workspaces) the authenticated principal belongs to.
List the organizations (workspaces) the authenticated principal belongs to. - Rensei REST API operation reference.
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Response Body
application/json
curl -X GET "https://example.com/api/org/list"{
"orgs": [
{
"id": "string",
"name": "string",
"slug": "string",
"role": "owner"
}
],
"activeOrgId": "string"
}Resolve the authenticated org context for a CLI key or user token.
Resolve the authenticated org context for a CLI key or user token. - Rensei REST API operation reference.
Trigger credential rotation fan-out
Called by the operator (CLI or admin UI) after rotating an upstream credential (Vault, 1Password, encrypted DB row, …). Re-resolves the `(orgId, kind)` tuple via the credential provider registry and fans the fresh value out to every live `rotate-stream` SSE subscriber for that org. Zero live subscribers is not an error. Auth: `Bearer rsk_*` via `getCliOrSessionAuth`. The `orgId` in the body must match the authenticated org. For `session` / `user_token` auth the caller must have `admin` or `owner` role; for `api_key` auth the cross-tenant guard is sufficient. The audit write is deferred (`after()`) and failures are non-fatal - the fan-out already fired.