Revoke a project API key
delete/v1/tenants/{tenant_id}/api-keys/{key_id}
Requires an API key
The team's owners, admins and developers, and Ivora administrators. Takes effect on the key's next request.
Path parameters
- tenant_idintegerRequired
- key_idstringRequiredPattern
^key_[0-9a-f]{32}$
Returns · 200
- idstringRequired
- labelstringRequired
- prefixstringRequiredThe key's first 16 characters, to recognise it; the secret is shown only when it is created.
- scopesarray of stringRequired
- revokedbooleanRequired
- created_atstringRequired
- api_versionstringRequiredThe dated API version the key is pinned to.
- tenant_idintegerRequired
- ownerstringRequiredproject: the key belongs to the project, not to the person who made it.
- created_bystring | nullRequireduser:<user_id> (or key:<id>) that made the key; null for keys made before project-owned keys.
- migratedbooleanRequiredTrue for a personal key moved to the project by the key migration.
- revoked_atstring | nullRequired
- revoked_bystring | nullRequired
- rate_limit_per_minuteinteger | nullRequiredA staff-set limit; null takes the default of 180 requests a minute.
DELETE /v1/tenants/{tenant_id}/api-keys/{key_id}
curl --fail-with-body -X DELETE "https://api.ivoracharge.com/v1/tenants/1042/api-keys/key_0123456789abcdef0123456789abcdef" \
-H "Authorization: Bearer $IVORA_API_KEY"Response · 200
{
"id": "id_0123456789abcdef",
"label": "string",
"prefix": "string",
"scopes": [
"string"
],
"revoked": false,
"created_at": "2026-09-30T17:00:00Z",
"api_version": "string",
"tenant_id": 1042,
"owner": "project",
"created_by": "string",
"migrated": false,
"revoked_at": "2026-09-30T17:00:00Z",
"revoked_by": "string",
"rate_limit_per_minute": 1
}Try it is not available here yetRequests from this page are off until the production API at
https://api.ivoracharge.com is public. Use the code samples from your application server; Ivora grants production access. Keys are created in Developer tools.