keys

Revoke a live IC Key

Clerk operator session OR an agt_ token carrying admin:llm_keys, live tier re-checked. Sets revoked_at on the token record, so the gateway 401s the key from its next call; the member can request again (or regenerate is no longer possible on a revoked key, they request anew). Idempotent: a repeat answers already_revoked: true. Audited.

post/api/credits/admin/revoke

Request

  • Base URL: https://www.immersivecommons.com
  • URL: https://www.immersivecommons.com/api/credits/admin/revoke
  • Auth: one of:
    • API key in cookie __session
    • HTTP bearer

Request body

token_sha256string required

The key to revoke, by sha256.

reasonstring

Free text for the audit trail.

Response

The revoked key's prefix.

okboolean required
token_prefixstring required
already_revokedboolean required

True when the key was already revoked (idempotent repeat).

Changes

No recorded changes to this operation across all 1 revision of this API.