API keys
Revoke an API key
Revokes a key. It stops authenticating immediately. Requires keys_write.
Idempotent: revoking a revoked key returns 200 with the original revoked_at. A revoked key is never deleted; it stays in the list with state: "revoked".
DELETE
/
v1
/
keys
/
{key_id}
Revoke an API key
curl --request DELETE \
--url https://api.opentype.dev/v1/keys/{key_id} \
--header 'Authorization: Bearer <token>'const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.opentype.dev/v1/keys/{key_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.opentype.dev/v1/keys/{key_id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.delete(url, headers=headers)
print(response.text){
"id": "<string>",
"name": "<string>",
"principal": {
"id": "<string>",
"type": "user"
},
"scopes": [
"runs_read"
],
"state": "active",
"secret_prefix": "<string>",
"created_by": "<string>",
"created_at": "<string>",
"last_used_at": "<string>",
"revoked_at": "<string>"
}Authorizations
bearerbearer
An API key (otsk_ + 64 hex) or a console session token.
Path Parameters
The key's id: key_ followed by 32 hex characters. Never the secret.
Response
The key, now revoked.
A key without its secret.
Who a key acts as: a user, or a service account owned by the organization.
- Option 1
- Option 2
Show child attributes
Show child attributes
A permission a key or session holds.
Available options:
runs_read, runs_write, keys_read, keys_write, members_read, members_write, billing_read, billing_write, usage_read A revoked key is kept, never deleted.
Available options:
active, revoked The first 13 characters of the secret (otsk_ plus 8), for display.
Revoke an API key
curl --request DELETE \
--url https://api.opentype.dev/v1/keys/{key_id} \
--header 'Authorization: Bearer <token>'const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.opentype.dev/v1/keys/{key_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.opentype.dev/v1/keys/{key_id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.delete(url, headers=headers)
print(response.text){
"id": "<string>",
"name": "<string>",
"principal": {
"id": "<string>",
"type": "user"
},
"scopes": [
"runs_read"
],
"state": "active",
"secret_prefix": "<string>",
"created_by": "<string>",
"created_at": "<string>",
"last_used_at": "<string>",
"revoked_at": "<string>"
}