Sign in

REVOKE a signed-token key: denylist it durably WITHOUT deleting the binding (GET /keys/{id} still shows the record; verify now fails). Idempotent: revoking an already-revoked key is 200. DELETE /keys/{id} is the revoke-AND-forget variant (1.5.0)

Changed on
post/api/v1/admin/keys/{id}/revoke

Request

  • The document declares no server URL.
  • Auth: one of:
    • API key in header x-admin-token
    • HTTP bearer

Path parameters

idstring required

Response

{revoked}: the id, now denylisted

revokedstring required

The id that was revoked (durably denylisted; the binding record remains).

Changes