Skip to main content
DELETE
Revoke an API key

Authorizations

Authorization
string
header
required

A Cognito access token, issued through the dashboard's own sign-up and sign-in pages (a backend-for-frontend; there is no Cognito Hosted UI) and sent as Authorization: Bearer <jwt>. Dashboard operations require this scheme and cannot be called with an API key, with no exception. GET /v1/usage and GET /v1/limits offered both schemes from 0.8.0; 0.8.1 withdrew that, because the control-plane API serves them alone and its authorizer has no API-key branch. An account_id supplied by the client is ignored; all reads/writes are scoped server-side to the authenticated account.

Path Parameters

key_id
string
required

Opaque, server-generated API key identifier.

Maximum string length: 40
Pattern: ^key_[A-Za-z0-9]{16,32}$

Response

The key is revoked (or was already revoked).