API keys

Revoke a developer API key

Disables the key and stamps when it happened, keeping the row so the audit trail still resolves. The key stops authenticating right away.

Session-only. This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

post/api/settings/developer/api-keys/{id}/revoke

Request

  • Base URL: https://api.setluca.com
  • URL: https://api.setluca.com/api/settings/developer/api-keys/{id}/revoke
  • Auth: API key in cookie luca.session_token

Path parameters

idstring required

Identifier of the API key this operation targets.

Headers

Luca-API-Version'1'

The major version of the API this client was built against. Omit it and the request is served by the current major version. Any other value is refused with 400 unsupported_api_version.

Response

ok

idstring required
namestring nullable required
prefixstring nullable required
startstring nullable required
scopesstring[] required
capabilityTier'read' | 'draft' | 'queue_ops' | 'full' required
dataSensitivityTier'redacted' | 'full_content' required
workspaceIdsstring[] required
workspaceMode'current' | 'selected' | 'all' required
createdByUserIdstring nullable required
rateLimitEnabledboolean required
rateLimitMaxinteger nullable required
rateLimitTimeWindowinteger nullable required
remaininginteger nullable required
lastUsedAtstring nullable required
expiresAtstring nullable required
revokedAtstring nullable required
status'active' | 'expired' | 'revoked' required
createdAtstring required
updatedAtstring required

Changes

No recorded changes to this operation across all 1 revision of this API.