API keys
Revoke an API key
Revokes a key. It stops authenticating immediately. Requires keys_write.
Idempotent: revoking a revoked key returns 200 with the original revoked_at. A revoked key is never deleted; it stays in the list with state: "revoked".
DELETE
Revoke an API key
Authorizations
An API key (otsk_ + 64 hex) or a console session token.
Path Parameters
The key's id: key_ followed by 32 hex characters. Never the secret.
Response
The key, now revoked.
A key without its secret.
Who a key acts as: a user, or a service account owned by the organization.
- Option 1
- Option 2
A permission a key or session holds.
Available options:
runs_read, runs_write, keys_read, keys_write, members_read, members_write, billing_read, billing_write, usage_read A revoked key is kept, never deleted.
Available options:
active, revoked The first 13 characters of the secret (otsk_ plus 8), for display.