DocumentationSDKsCLIAPI Reference
Console
API keys

Revoke an API key

Idempotent: revoking an already-revoked key returns the same body, so a rotation script that re-runs does not have to special-case having already succeeded.

DELETE
/api_keys/{api_key_id}

Idempotent: revoking an already-revoked key returns the same body, so a rotation script that re-runs does not have to special-case having already succeeded.

Authorization

apiKey
AuthorizationBearer <token>

API key from the console, ak_....

In: header

Path Parameters

api_key_id*string

Response Body

application/json

application/json

application/json

curl -X DELETE "https://example.com/api_keys/string"
{  "id": "string",  "object": "api_key",  "name": "string",  "last4": "string",  "revoked": true,  "last_used_at": "2019-08-24T14:15:22Z",  "created_at": "2019-08-24T14:15:22Z"}

List API keys GET

Keys are never returned in full — only their identity and last four. Creation stays in the console deliberately: a leaked key that can mint more keys is a leaked account.