Skip to main content
Deactivate an existing API key immediately. The action is irreversible; clients using the key will start receiving 401 Unauthorized responses.
API key management endpoints are rate limited to 30 requests per minute per authenticated user.
​
key_id
string
required
Identifier of the key to revoke. Obtain from GET /api/keys/list.

​
Example Response

{
  "success": true,
  "key_id": "550e8400-e29b-41d4-a716-446655440000",
  "key_prefix": "tmr_sk_live_a1b2c3d4",
  "name": "Production API Key",
  "revoked_at": "2025-10-24T15:35:00.000Z",
  "message": "API key successfully revoked"
}
Only the key owner can revoke their key. The service returns 403 Forbidden if the key belongs to another user.