---
title: "Enable or disable an API token"
method: PUT
path: "/api/v1/api-keys/{id}"
tags: ["API Tokens"]
---

# Enable or disable an API token

`PUT /api/v1/api-keys/{id}`

Enables or disables an API token. Requires organization admin permissions.

## Path parameters

- `id` string, uuid, required — Token UUID

## Request body

- ApiKeyUpdateBody
  - `enabled` boolean, required — Set to `false` to disable the token, `true` to re-enable it.

## Response `200`

The updated API token

- ApiKey
  - `createdAt` string, date-time, required — ISO 8601 timestamp of when the token was created
  - `enabled` boolean, required — Whether the token can currently authenticate. A disabled token cannot authenticate but remains visible until deleted.
  - `id` string, uuid, required — Unique identifier for the token
  - `membershipId` string, uuid, nullable, required — Membership ID of the user the token is scoped to. Null for organization-level tokens.
  - `name` string, required — Human-readable name for the token
  - `type` 'organization' | 'personal' | 'mcp', required — Token type: `organization` (org-level), `personal` (user-created personal access token), or `mcp` (MCP OAuth grant).

## Other responses

- `400` — Invalid body, malformed `id`, or missing/malformed `Authorization` header
- `403` — Invalid bearer token, or caller lacks organization admin permissions
- `404` — Token not found in this organization
- `405` — Method not allowed

---

[API](https://skmtc.net/omniapp/apis/omni-api.md) · [All operations](https://skmtc.net/omniapp/apis/omni-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/omniapp/omni-api/versions/de7cac8b5983/schema)