Skip to main content
DELETE
Revoke a team API key or MCP grant
A signed-in human administrator is required. API keys and MCP credentials cannot replace that session. Sensitive operations can also require recent authentication. Revokes an owned credential. Team revocation also requires recent authentication; subsequent requests cannot use the revoked key or grant. Request conventions · API keys · MCP connections

Authorizations

posted_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Posted UI origin. Required for browser mutations carrying session cookies.

Path Parameters

id
string<uuid>
required

The id from the corresponding list, record or authorization response.

Response

Successful response. Examples are illustrative; field values vary by record.

revoked
boolean