revoke_api_key
Revoke one API key by id (find ids with list_api_keys). The key stops authenticating and the revocation cannot be undone from this tool. This is a credential revocation, not an idempotent delete: an unknown key_id — including an already-revoked one — fails with api_key_not_found (no silent no-op, so a mistyped id can never mask a live credential). Guardrails: revoking the organization's last active key is refused with cannot_revoke_last_key — create a replacement with create_api_key first. Returns key_id with revoked: true.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"key_id": "<key_id>"
},
"name": "revoke_api_key"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key_id | Yes | API key id from list_api_keys. |