# Rotate an account’s API keys

Add multiple masked keys to a supported provider account and try the next key.

A key pool keeps an ordered list of API keys for a supported provider account. You can move to the next key from the agent node when a request needs a different credential.

## Add keys and switch

1. Open **Accounts** and edit the provider account.
2. Add the API keys to its key pool. The saved values are masked.
3. When you want to try another key, choose **Restart with next key · n of N** on the agent node.
4. Check the node after it starts to see whether the new key works.

> **Note:** MAO advances the pool only after the child process starts.

> **Limit:** Key-pool support depends on the provider integration. Credentials are not included in logs or diagnostics.

Source: https://trymao.dev/docs/agent-presets-accounts-roles/account-key-pools