Skip to main content
POST
Revoke an org API key

Authorizations

__Host-omnara_session
string
cookie
required

Browser session cookie. HTTPS deployments use __Host-omnara_session; local HTTP development uses omnara_session.

X-Omnara-Csrf
string
header
required

CSRF token header required for browser-session mutations. The value must match the session's CSRF cookie.

Path Parameters

orgID
string
required
Pattern: ^org_[a-z2-7]{26}$
keyID
string
required
Pattern: ^oak_[a-z2-7]{26}$

Response

The revoked org API key.

id
string
required
Pattern: ^oak_[a-z2-7]{26}$
org_id
string
required
Pattern: ^org_[a-z2-7]{26}$
name
string
required

Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.

Required string length: 1 - 64
token_id
string
required

Stable non-secret display identifier. It is not embedded in the bearer token.

org_role
string
required

The key's org role (admin or member). Empty for revoked keys.

created_by_user_id
string
required
Pattern: ^usr_[a-z2-7]{26}$
created_at
string<date-time>
required
updated_at
string<date-time>
required
last_used_at
string<date-time> | null
required
revoked_at
string<date-time> | null
required