Skip to main content
Revoke an API key from the API Keys page when it’s no longer needed or may have been exposed. Revocation is immediate and permanent — a revoked key is rejected on every subsequent request and can never be reactivated. If you still need access, create a new key.

​
Revoke a key

1

Open API Keys

From the sidebar, click API Keys.
2

Click the trash icon

In the Active Keys table, find the key by its label and click the trash icon (tooltip: “Revoke key”) on its row. The row disappears immediately on success — there is no confirmation dialog, so make sure you’ve selected the right key first.

​
Who can revoke a key

Both admins and members can revoke keys from a dashboard session, but their scope differs:
The dashboard shows the trash icon on every key row, regardless of who created the key. The permission check runs server-side: if a member tries to revoke a key they didn’t create, the action fails and the row stays in place. This also means a member can’t tell, from the failure, whether another user’s key id even exists.