Revoke key
Revoke a credential immediately.
/keys/{key_id}PermissionCluster key, or a namespace key managing collection keys within its namespace. Key scopes and actions.
- Successful revocation returns 204 with no body. Future requests with the revoked secret fail authentication.
Path parameters
Administrative key ID with the key_ prefix. Use the ID returned by create or list, not the secret.
Responses
204Key revoked
Revocation completed. This response has no body.
Response headers
The Engine request ID. Retain it when investigating a failed or unexpected request.
The X-Request-Id you sent, echoed when it is a valid ID. Otherwise, the Engine request ID.
This response has no body.
Errors
Select an error in the response example to see its JSON body. See error handling for the common error format.
- 400invalid_request
A field, path, parameter, or conditional request rule is invalid.
What to do: Correct the request. Unknown fields are rejected.
- 401unauthenticated
The API key is missing, invalid, or revoked.
What to do: Send an active key in Authorization: Bearer or X-API-Key.
- 403forbidden
The key can see the resource but lacks permission for this operation.
What to do: Use a key with the required action or scope kind.
- 404not_found
The resource is absent, deleted, or outside this key’s scope.
What to do: Check the identifier and the key’s namespace and collection scope.
- 500internal_error
An unexpected server failure prevented this request from completing.
What to do: Retain request_id for investigation. Follow retryable before retrying a write.