DELETE /api-keys/:id
Path Parameters
Response
Returns{"status": "success"} — no body beyond the status.
Errors
Revoking is a human act, the same as minting: a service account’s own key gets
403 for every key it tries to delete, including its own, whatever role it carries. A leaked key therefore
cannot revoke the key you would use to shut it down. Use an
acting token when automation genuinely has to revoke on a human’s behalf.

