Update an API key
Updates mutable fields of an API key: display name, status (active / disabled / revoked), permission mode and access map, project scope and constraints. Omitted fields keep their current values. Unknown body fields are rejected.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Unique identifier of the API key.
Body
Per-domain access level (none, read or write) for restricted keys.
Legacy toggle mirrored onto status: false disables, true re-enables.
Expiry and other limits; null clears them.
New display name.
100Permission preset; a restricted key must keep at least one granted domain.
all, restricted, read_only Projects the key may reach.
Lifecycle status; revoked is terminal.
active, disabled, revoked Response
The updated API key
Unique identifier of the key.
Display name of the key.
The raw secret on create only; a masked display value everywhere else.
Workspace the key belongs to.
all, restricted, read_only active, disabled, revoked Display prefix of the secret; not usable as a credential.