Rotate API Keys Without Breaking Integrations

import requests

API = "https://api.multimail.dev/v1"
HEADERS = {"Authorization": "Bearer mm_live_xxx"}

response = requests.post(
    f"{API}/send",
    headers=HEADERS,
    json={
        "from": "[email protected]",
        "to": ["[email protected]"],
        "subject": "Action required: API key rotation on April 1 - migration guide",
        "text_body": (
            "Hi Developer,\n\n"
            "Your API key mm_live_abc123... will be rotated on April 1, 2026.\n\n"
            "To ensure uninterrupted service:\n\n"
            "1. Generate a new key at https://dashboard.yourcompany.com/api-keys\n"
            "2. Update your application to use the new key\n"
            "3. Test in staging: https://api-staging.yourcompany.com/v1/health\n"
            "4. Deploy the updated key before April 1\n\n"
            "Your current key will stop working on April 1 at 00:00 UTC.\n\n"
            "Questions? Reply to this email or contact [email protected]"
        ),
        "html_body": "<h2>API Key Rotation Notice</h2><p>Your API key will be rotated...</p>"
    }
)
print(f"Rotation notice queued: {response.json()[&"cm">#039;id']}")

import requests

API = "https://api.multimail.dev/v1"
HEADERS = {"Authorization": "Bearer mm_live_xxx"}

"cm"># Find consumers tagged as unmigrated
unmigrated = requests.get(
    f"{API}/contacts/search",
    headers=HEADERS,
    params={"query": "api-rotation-pending unmigrated"}
).json()

for consumer in unmigrated["results"]:
    response = requests.post(
        f"{API}/send",
        headers=HEADERS,
        json={
            "from": "[email protected]",
            "to": [consumer["email"]],
            "subject": "URGENT: API key expires in 7 days - action required",
            "text_body": (
                f"Hi {consumer[&"cm">#039;name']},\n\n"
                f"Your API key has NOT been rotated yet and will stop " 
                f"working on April 1.\n\n"
                f"Generate your new key now: https://dashboard.yourcompany.com/api-keys"
            )
        }
    )

"cm">// Find all affected API consumers
const consumers = await mcp.search_contacts({
  query: "api-consumer active",
  limit: 200
});

"cm">// Send rotation notices
for (const consumer of consumers.results) {
  const result = await mcp.send_email({
    to: consumer.email,
    subject: "Action required: API key rotation on April 1",
    text_body: `Hi ${consumer.name}, your API key will be rotated...`
  });

  await mcp.tag_email({
    email_id: result.id,
    tags: ["key-rotation", "april-2026", "pending-migration"]
  });
}

"cm">// Check pending approvals
const pending = await mcp.list_pending({
  mailbox_id: "security-mailbox-id"
});
console.log(`${pending.emails.length} rotation notices awaiting review`);