401 Unauthorized. The key stays in your API keys list with a Revoked status, so you keep a record of it and can permanently delete it later.
Revoke a key when:
- The key was accidentally shared or committed to a public repository
- A team member leaves and their key should stop working
- An integration is being decommissioned
1
Open API keys
Go to Settings → API keys.
2
Revoke the key
On the key’s row, click Revoke.
3
Confirm
Confirm in the dialog. The key’s status changes to
Revoked immediately.Revoked vs deleted
Revoking is the first step. To remove a revoked key from the list entirely, see Delete API key — a key must be revoked before it can be deleted.