> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tumban.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke API key

> Permanently revoke an API key from the dashboard.

Revoke an API key from the **API Keys** page when it's no longer needed
or may have been exposed. Revocation is **immediate and permanent** — a
revoked key is rejected on every subsequent request and can never be
reactivated. If you still need access, create a new key.

## Revoke a key

<Steps>
  <Step title="Open API Keys">
    From the sidebar, click **API Keys**.
  </Step>

  <Step title="Click the trash icon">
    In the **Active Keys** table, find the key by its label and click
    the trash icon (tooltip: *"Revoke key"*) on its row. The row
    disappears immediately on success — there is **no** confirmation
    dialog, so make sure you've selected the right key first.
  </Step>
</Steps>

## Who can revoke a key

Both admins and members can revoke keys from a dashboard session, but
their scope differs:

| Role   | Allowed to revoke                        |
| ------ | ---------------------------------------- |
| Admin  | Any key in the organization.             |
| Member | Only keys the member created themselves. |

<Note>
  The dashboard shows the trash icon on every key row, regardless of who
  created the key. The permission check runs server-side: if a member
  tries to revoke a key they didn't create, the action fails and the row
  stays in place. This also means a member can't tell, from the failure,
  whether another user's key id even exists.
</Note>