Revoke Key
API Keys
Revoke Key
Revoke one of the caller’s keys.
The row is kept and stamped with revoked_at rather than deleted, so the
audit trail still records that the key existed and when it stopped working.
Raises: HTTPException 404: If the key does not exist or belongs to someone else. The two cases are deliberately indistinguishable.
DELETE
Revoke Key
Authorizations
A personal access token (haico_pat_...), created under Profile → API keys. Send it as Authorization: Bearer <key>. The browser session JWT is also accepted but is an internal mechanism and is not part of the public contract.
Path Parameters
Response
Successful Response
A key's non-secret metadata. The plaintext is never included here.