Immediately invalidates the programmatic token used to authorize this request and creates a replacement session. The replacement keeps the same allowed IP addresses and the original expiry time; resetting a token does not extend its lifetime. The new token is emailed to the integrator account, and the response contains the new session ID.

If a webhook URL is configured, the token-reset event may also deliver the replacement token and session ID to that webhook. Store the replacement securely and stop using the previous token.

Older tokens that do not have a saved IP allowlist or valid future expiry cannot be reset safely. In that case, the current token is not disabled; generate a new token with an explicit IP allowlist and expiry instead.