Agent Wallet

Revoke an API key

Revokes one lasoak_ API key, the same action as Revoke on the dashboard. A revoked key can no longer be exchanged for a session at agentAuth, and its MCP event subscriptions stop. A session already minted from the key is not cut off: its id_token lasts out its hour. Revoking a key that is already revoked succeeds and changes nothing.

To revoke a key you hold the raw value of, you can instead POST it as token to /oauth/revoke (RFC 7009) without looking up its keyId.

A Firebase callable. Callables wrap the request in {"data": ...} and the reply in {"result": ...}. Send the id_token from /auth as a Bearer token. Free.

post/revokeAgentApiKey

Request

Base URL: https://laso.finance
URL: https://laso.finance/revokeAgentApiKey
Auth: API key in header Authorization

Request body

Example request

{
  "data": {
    "userId": "usr_7aff81763cae58c936aa6de67dd5a95e",
    "keyId": "3f1c9a0e5b7d2c4f6a8e0b1d3c5f7a9e2b4d6f8a0c1e3b5d7f9a1c3e5b7d9f0a"
  }
}

Response

The key is revoked. Nothing is returned.

resultobject

Changes

No recorded changes to this operation across all 2 revisions of this API.