You will have stopped a key from working.
Before you start
You need the API Keys Manage permission. If the key may have leaked, revoke it first and tidy up afterwards. Revoking cannot be undone.
Steps
- Open API Keys and find the key. Use the name filter, or the status filter set to Active.
- Check its name, prefix and last used. A key not used for months is usually safe to revoke.
- Press Revoke on its row. There is no confirmation, so check the name before pressing.
- If you also want it gone from the list, press Delete and confirm.
What you will see
The status changes to Revoked and the key stops working at once. The integration now receives a 401 error. The row stays, with its history, until you delete it.
If something goes wrong
- A revoked key can never be reactivated; create a new one and update the integration.
- Deleting a key removes the row for good and is not reversible.
- A key also stops when the person who created it is deactivated, and deleting that person revokes their keys.
- If the old key had broad permissions, review what it could have done in the audit trail.