Hey! For managed service, it's not possible at the moment. For self hosted, you can provide the core multiple API keys (in the config.yaml file), and then on the backend SDK side, you can provide any one of the keys.
This way, you can manually rotate the API keys.
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).