Revoke an API key (rows are never deleted)
DELETE /v1/keys/{key_id}
Revoke an API key (rows are never deleted)
Credential. A dashboard session token only. An API key cannot call this — a key must never be able to mint another key.
curl --fail-with-body -X DELETE "https://api-833252724876.us-central1.run.app/v1/keys/key_a1b2c3d4e5f6g7h8i9j0" \
-H "Authorization: Bearer $JEAN_SESSION_TOKEN"
Path
| Name | Type | Required | Notes |
|---|---|---|---|
key_id | string | yes |
Response · 200
{
"id": "key_a1b2c3d4e5f6g7h8i9j0",
"org_id": "org_k3j2h4g5f6d7s8a9q0w1",
"name": "ci",
"prefix": "jean_live_exam",
"created_by": "usr_b2c3d4e5f6g7h8i9j0k1",
"created_at": "2026-01-15T09:30:00Z",
"last_used_at": null,
"revoked_at": null
}
Errors
| Status | Meaning |
|---|---|
401 | Unauthenticated, invalid token or revoked key. |
403 | Forbidden, session required or org required. |
404 | No such resource in this org. |
422 | Validation failed. |
429 | Quota or rate limit exceeded; error.details says which, and when. |
500 | Internal error; quote error.request_id when reporting it. |
Every one carries the same envelope.