Sign in
Project Keys

Disable Project Key Agentic

Toggle agentic use OFF for a Project Key.

Erases agentic_secret_blob and clears the flag. Does NOT rotate the API credential - the PK keeps working for non-agentic uses (raw API calls, Kafka). Idempotent on already-disabled PKs.

Rate limit: 5/min/tenant. Audit-logged with action=disable / disable_noop.

post/project-keys/{project_key_id}/disable-agentic

Path parameters

project_key_idstring required

Response

Successful Response

idstring required
namestring required
descriptionstring nullable
created_atstring date-time nullable
api_client_idstring nullable
api_client_id_masked_secretstring nullable
kafka_usernamestring nullable
service_idstring required
statusstring required
last_used_atstring date-time nullable
tool_profile'full' | 'read-only' | 'agent-operator' | 'infra-admin'
allowed_toolsstring[] nullable
blocked_toolsstring[] nullable
agentic_enabledboolean

Whether this Project Key is wired up as the auth blob behind the Streamkap MCP. Toggled via POST /project-keys/{id}/enable-agentic and disable-agentic. When true, the encrypted credential lives on the PK row (server-side only); the agent picker on the FE filters to PKs where this is true.

agentic_secret_blobstring nullable

Always masked to '********' on responses when agentic_enabled is true; null otherwise. Server-derived only - PUT/PATCH bodies that include this field are rejected with 422.

Changes

Changed in 1 of the 4 revisions of this API.1