> ## Documentation Index > Fetch the complete documentation index at: https://docs.factorize.sh/llms.txt > Use this file to discover all available pages before exploring further. # Get encrypted state for owner key rotation > Owner browser session only. Returns encrypted records, tombstones, and pending change history for local re-encryption; plaintext credentials and unlock keys are never returned. Requires the integrations:read scope. An interactive owner session is required; bearer tokens cannot call this operation. ## OpenAPI ````yaml /openapi.yaml get /api/v1/unlock-key/rotation-snapshot openapi: 3.1.0 info: title: Factorize API version: 1.0.0 description: >- Versioned Factorize REST API. See the hosted docs for examples and OAuth discovery. x-dashboard-auth: >- Access-token and authorized-client management and trace replay operations require an interactive owner session; all other operations accept a suitably scoped bearer token or owner session. servers: - url: https://app.factorize.sh security: - bearerAuth: [] paths: /api/v1/unlock-key/rotation-snapshot: get: tags: - unlock-key summary: Get encrypted state for owner key rotation description: >- Owner browser session only. Returns encrypted records, tombstones, and pending change history for local re-encryption; plaintext credentials and unlock keys are never returned. Requires the integrations:read scope. An interactive owner session is required; bearer tokens cannot call this operation. operationId: get_api_v1_unlock_key_rotation_snapshot responses: '200': description: Encrypted rekey snapshot content: application/json: schema: type: object properties: ownerId: type: string generationId: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ revision: type: integer minimum: 0 maximum: 9007199254740991 records: maxItems: 5000 type: array items: type: object properties: id: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ kind: type: string enum: - bearer - model name: type: string minLength: 1 maxLength: 120 origin: type: - string - 'null' description: anyOf: - type: string maxLength: 500 - type: 'null' revision: type: integer minimum: 0 maximum: 9007199254740991 encryptedPayload: anyOf: - type: string maxLength: 65536 - type: 'null' deletedAt: anyOf: - type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ - type: 'null' required: - id - kind - name - origin - description - revision - encryptedPayload - deletedAt additionalProperties: false changes: maxItems: 10000 type: array items: type: object properties: id: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ kind: type: string enum: - bearer - model name: type: string minLength: 1 maxLength: 120 origin: type: - string - 'null' description: anyOf: - type: string maxLength: 500 - type: 'null' revision: type: integer exclusiveMinimum: 0 maximum: 9007199254740991 idempotencyKey: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ operation: type: string enum: - upsert - delete encryptedPayload: anyOf: - type: string maxLength: 65536 - type: 'null' recordRevision: anyOf: - type: integer exclusiveMinimum: 0 maximum: 9007199254740991 - type: 'null' required: - id - kind - name - origin - description - revision - idempotencyKey - operation - encryptedPayload additionalProperties: false required: - ownerId - generationId - revision - records - changes additionalProperties: false '400': $ref: '#/components/responses/Error400' '401': $ref: '#/components/responses/Error401' '403': $ref: '#/components/responses/Error403' '404': $ref: '#/components/responses/Error404' '409': $ref: '#/components/responses/Error409' '429': $ref: '#/components/responses/Error429' '500': $ref: '#/components/responses/Error500' '503': $ref: '#/components/responses/Error503' security: - bearerAuth: [] - cookieAuth: [] components: responses: Error400: description: Invalid request content: application/json: schema: $ref: '#/components/schemas/Error' Error401: description: Invalid or revoked credentials content: application/json: schema: $ref: '#/components/schemas/Error' Error403: description: Missing scope or required owner session content: application/json: schema: $ref: '#/components/schemas/Error' Error404: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/Error' Error409: description: Operation conflict content: application/json: schema: $ref: '#/components/schemas/Error' Error429: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/Error' Error500: description: Internal error content: application/json: schema: $ref: '#/components/schemas/Error' Error503: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/Error' schemas: Error: type: object required: - error properties: error: type: object required: - code - message properties: code: type: string message: type: string securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: OAuth2 cookieAuth: type: apiKey in: cookie name: factorize_session ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.