Revoke an org API key
Users and API Keys
Revoke an org API key
Terminally revokes the key and removes its org and project roles. Idempotent.
POST
Revoke an org API key
Authorizations
Browser session cookie. HTTPS deployments use __Host-omnara_session; local HTTP development uses omnara_session.
CSRF token header required for browser-session mutations. The value must match the session's CSRF cookie.
Path Parameters
Pattern:
^org_[a-z2-7]{26}$Pattern:
^oak_[a-z2-7]{26}$Response
The revoked org API key.
Pattern:
^oak_[a-z2-7]{26}$Pattern:
^org_[a-z2-7]{26}$Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.
Required string length:
1 - 64Stable non-secret display identifier. It is not embedded in the bearer token.
The key's org role (admin or member). Empty for revoked keys.
Pattern:
^usr_[a-z2-7]{26}$