v1

latestOpenAPI 3.1.02026-07-2618690613.4 KB
API Tokens

Delete API token

<Note> This endpoint requires **Organization Admin** permissions. </Note>

Permanently delete an API token. Works for all token types — Organization API keys, Personal Access Tokens (PATs), and MCP OAuth grants. This is the same as revoking a token in the Omni app.

Concurrent deletes are safe — the first caller receives 200 and the second receives 404 consistently. An Organization Admin can delete the token they authenticated with, which is useful for self-service rotation.

delete/v1/api-keys/{id}

Path parameters

idstring uuid required

UUID of the token to revoke. The token must belong to the same organization as the authenticating user.

Response

Token revoked successfully. The row is deleted; subsequent GET returns 404.

messagestring

Human-readable description of the outcome.

successboolean

Always true on a successful revocation.