---
title: "Revoke an API key"
method: POST
path: "/v1/keys/{id}/revoke"
tags: ["Keys"]
---

# Revoke an API key

`POST /v1/keys/{id}/revoke`

## Request

- Base URL: `https://brain.inite.ai`
- URL: `https://brain.inite.ai/v1/keys/{id}/revoke`
- Auth: HTTP bearer

Stops the key authenticating. The row is kept (revoked, not deleted) so the history stays auditable. Returns `{revoked:false}` when the id is unknown OR belongs to another tenant or another user — deliberately indistinguishable, so the endpoint cannot be used to probe for key ids. Revocation is immediate on this pod and within 30s elsewhere (the resolution cache TTL).

Required scope: `brain:read`.

## Path parameters

- `id` string, required

## Response `201`

Whether a key was revoked.

- RevokeKeyResponse
  - `revoked` boolean, required

## Other responses

- `401`: Missing or unknown bearer key.
- `403`: The key lacks the required scope.

---

[API](https://skmtc.dev/inite/apis/inite-brain-platform-api.md) · [All operations](https://skmtc.dev/inite/apis/inite-brain-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/inite/apis/inite-brain-platform-api/revisions/c7c3eb5e304b?raw)