PApaywithlocus
Tenants

Revoke an API key

Revokes one key immediately; it returns 401 on the next request. Use this as the final step of a rotation, after the new credential is confirmed working. Requires a workspace owner or admin with MFA step-up completed in the last ten minutes.

delete/credits/tenants/me/keys/{keyId}

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/tenants/me/keys/{keyId}
  • Auth
    HTTP bearer

Path parameters

keyIdstring uuid required

Key record id from GET /credits/tenants/me/keys.

Headers

X-Locus-Step-Upstring password

Short-lived raw MFA/passkey step-up token bound to the authenticated Cognito subject. Send it alongside the dashboard Bearer token for workspace-administrator mutations when the base session does not itself prove MFA within the last ten minutes. Never send it with a tenant secret key.

Request body

reasonstring

Recorded on the credential audit event.

Response

Revoked. The key is dead as of this response. Idempotent: revoking an already-revoked key returns 204 again without a second audit event.

Changes

No recorded changes to this operation across all 1 revision of this API.