keys.revoke
Revoke a named agent key (owner only). It stops working at once and cannot be turned back on; make a new key instead.
| Who | Agents can call this |
| REST | POST /v1/keys/revoke |
| MCP tool | keys_revoke |
| Writes | yes, send an Idempotency-Key |
| Area | Sign-in and agent access |
When to use it
The owner makes a key for each agent they use, with a name they will recognize. The key is shown once and never again, so save it when it is made.
What to tell the owner
Say what you did in plain words and what happens next.
Input
| Field | Type | Required |
|---|---|---|
key_id | string | yes |
reason | string | no |
Example
POST https://doingwork.work/v1/keys/revoke
content-type: application/json
Idempotency-Key: 3f1c...
{
"key_id": "00000000-0000-4000-8000-000000000000"
}Output
JSON. The response shape isn't published yet; read the fields you need and ignore the rest. Errors are {code, message, status}.
Errors
| Code | Status | What to do |
|---|---|---|
invalid_input, invalid_token, rate_limited | Can happen on any call. See errors. |