Revoke an API key

For the signed-in owner, in a browser session. Requests with the key stop working at once. A connector (MCP/OAuth) token is refused on every account-management door with 403 browser_session_required: a connector does MCP work, it does not manage keys.

delete/user/api-keys/{id}

Request

  • Base URL: https://rendry.io/api/v1
  • URL: https://rendry.io/api/v1/user/api-keys/{id}
  • Auth: HTTP bearer

Path parameters

idstring required

Headers

X-End-Userstring

Analytics correlation only; never authorizes files or accounts. One safe ASCII value up to 64 bytes. Invalid values return 400. Persisted embedded subject takes precedence. Allowed by CORS.

X-Rendry-Accountstring

Browser/OAuth current member account selector. API keys/embed credentials are bound to their persisted account and reject another account. Omitting this header selects the browser actor personal account.

Response

Revoked

Changes

No recorded changes to this operation across all 1 revision of this API.