Revoke an API key

The key stops working at once, and so do any dashboard sessions created from it. Webhooks created with the key, or from a dashboard session created from it, are switched off (is_active: false, disabled_reason: "api_key_revoked") and stay listed until you turn them back on or delete them. They are switched off before the key is revoked: if that fails, this answers 500 and the key is not revoked, so the same request can be sent again, even with the key itself. The account's last active key cannot be revoked; create a replacement first.