Revoke an API key

Revokes one of your keys on this account; anything using it is refused from its next request. Needs a key with manage_keys on, and a member or owner role. A key outside your reach — another person’s, another account’s, or for a workspace-scoped key any key not confined to its workspace — is the same 404 as one that does not exist.

A key may revoke itself; the request that does it is its last.

The SSH keys added through this key go with it: the gateway refuses them to any connection it has not already let through, and each is taken off the computers it was written into as each computer receives the new key list. Until a computer does, a connection already let through can still reach it; the answer does not wait for the computers. No other API key is revoked: the keys it minted keep working, and each names it in minted_by_key_id; the dashboard can revoke them with it, or in one step after it has been revoked.

Requires the member role or higher.