Organization API Keys

Revoke an API key.

🔒 The "admin-key" is protected and cannot be deleted.

Studio session keys can be revoked here by name or key_id; list them with include_session_keys=true.

Refuses when a live published app still embeds this key, naming the app. A 2026-06-03 revocation killed 2 published apps for seven weeks because nothing in this path looked for references and the call reported success.

delete/v1/organizations/users/{user_email}/api-keys/{key_name}

Request

  • Base URL: https://api.mixpeek.com
  • URL: https://api.mixpeek.com/v1/organizations/users/{user_email}/api-keys/{key_name}
  • Auth: HTTP bearer

Path parameters

user_emailstring required
key_namestring required

Query parameters

forceboolean

Revoke even when a live published app still embeds this key. Without it, the call is refused and names the apps that would break. Use force for a COMPROMISED key, where breaking them is the point.

Response

Successful Response

messagestring
successboolean

Changes

    • warning

      removed the optional property from the response with the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      added the optional property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      the endpoint scheme security BearerAuth was added to the API