Rotate the share link
Mints a new share link and stops the old URL from granting access. Everyone you shared it with needs the new one.
Rotation does NOT evict anyone who already redeemed the old link. Their grant is a stored row, not a property of the URL, and it survives rotation — accessVersion is deliberately not bumped here. So rotation alone does not undo a leak: rotate to close the door, then DELETE .../members/{memberIdOrEmail} for anyone who already walked through it.
Bodyless: the scenario is the whole request, and the new secret is minted server-side by definition.
Authorizations
MCPJam API key (sk_…). Create one at Settings → API keys. Guest sessions cannot use the API, and API keys cannot manage other API keys.
Path Parameters
ID of the hosted project that contains the server.
Scenario ID, as returned by publishing an environment or by the project's scenario reads.

