Revoke an API key
Revokes a key: the fragment endpoint refuses it from the next request. Repeatable: revoking it again answers 200 with the first revocation time. The key is not deleted — deleting a revoked key is a console action. The body is {}.
Authorizations
A management token: ds_mgmt_ followed by 40 lowercase hexadecimal characters, created by an owner in Settings → Management tokens. Opaque: send it as is, in the Authorization header only.
Path Parameters
The key id (key_…), from GET /v1/keys.
Body
Send Content-Type: application/json and {}.
An empty JSON object, {}. A DELETE without it is refused (400).
Response
The key, revoked.
A delivery API key, as listed. Never the full key, never its hash.
Stable key id (key_…).
The key name, or null.
The first characters of the key, shown to recognise it.
Creation time, UTC.
Last use on the fragment endpoint, or null.
First revocation time, or null for an active key.