Revoke an operator API key (Admin/Owner session only)
POST
/operator-keys/{key_id}/revocation
const url = 'https://quikstik-core.fly.dev/operator-keys/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/revocation';const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://quikstik-core.fly.dev/operator-keys/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/revocation \ --header 'Authorization: Bearer <token>'Tombstones the key (the grant row remains as the audit fact). Tenant-scoped — another
tenant’s key id is a 404, indistinguishable from unknown or already-revoked.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”key_id
required
string format: uuid
Responses
Section titled “Responses”Key revoked
No or invalid session
Session actor is not Admin/Owner in the tenant
Expired, consumed, unknown, or unresolvable — indistinguishable by design
Media typeapplication/json
object
reason
required
string
Example generated
{ "reason": "example"}No durable backend is wired for this operation (fail-closed)
Media typeapplication/json
object
reason
required
Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).
string
Example
{ "reason": "sold_out"}