Disables the API key; it is not permanently deleted. The caller must be able to grant all of the key's existing permissions. The key remains retrievable and appears in list results with include_disabled=true. It can be re-enabled through update, subject to permission checks. Deleting an already disabled key succeeds when authorized. Use id, not api_id.

Rate limit: 20 requests per minute per organization, shared across all operations in the api-key:write group and all API keys belonging to that organization.