Revoke an API key
API keys
Revoke an API key
Takes effect immediately. Revocation is a timestamp, not a row delete — knowing which key was live when matters more than a tidy table if one is ever abused.
Nothing stops a key revoking itself. Revoke the old key only after the new one’s traffic has taken over.
Requires the api-keys.write scope.
A subject-bound key cannot call this. Revocation is a tenant-wide power — left open, one end user’s key could take the account’s own key offline. 403.
DELETE
Revoke an API key