v10

latestOpenAPI 3.1.02026-08-085671,1112.8 MB
Organization API Keys

Delete Api Key

Revoke an API key.

🔒 The "admin-key" is protected and cannot be deleted.

Refuses when a live published app still embeds this key, naming the app (MF-413). A 2026-06-03 revocation killed 2 published apps for seven weeks because nothing in this path looked for references and the call reported success.

delete/v1/organizations/users/{user_email}/api-keys/{key_name}

Path parameters

user_emailstring required
key_namestring required

Query parameters

forceboolean

Revoke even when a live published app still embeds this key. Without it, the call is refused and names the apps that would break. Use force for a COMPROMISED key, where breaking them is the point.

Revoke even when a live published app still embeds this key. Without it, the call is refused and names the apps that would break. Use force for a COMPROMISED key, where breaking them is the point.

Response

Successful Response

messagestring
successboolean