v3

latestOpenAPI 3.1.0Proprietary2026-08-07266348629.6 KB

Project Keys

Disable Project Key Agentic

Toggle agentic use OFF for a Project Key.

Erases agentic_secret_blob and clears the flag. Does NOT rotate the API credential - the PK keeps working for non-agentic uses (raw API calls, Kafka). Idempotent on already-disabled PKs.

Rate limit: 5/min/tenant. Audit-logged with action=disable / disable_noop.

post/project-keys/{project_key_id}/disable-agentic

Path parameters

project_key_idstring required

Response

Successful Response

idstring required

namestring required

descriptionstring nullable

created_atstring date-time nullable

api_client_idstring nullable

api_client_id_masked_secretstring nullable

kafka_usernamestring nullable

service_idstring required

statusstring required

last_used_atstring date-time nullable

tool_profile'full' | 'read-only' | 'agent-operator' | 'infra-admin'

allowed_toolsstring[] nullable

blocked_toolsstring[] nullable

agentic_enabledboolean

Whether this Project Key is wired up as the auth blob behind the Streamkap MCP. Toggled via POST /project-keys/{id}/enable-agentic and disable-agentic. When true, the encrypted credential lives on the PK row (server-side only); the agent picker on the FE filters to PKs where this is true.

agentic_secret_blobstring nullable

Always masked to '********' on responses when agentic_enabled is true; null otherwise. Server-derived only - PUT/PATCH bodies that include this field are rejected with 422.