# flow2act · API-Key widerrufen

Widerrufe einen Schlüssel als Administrator. Nachfolgende Aufrufe damit werden abgewiesen.



## POST /v1/api-keys/{keyId}/revoke

Authentication: FLOW2ACT_ACCESS_TOKEN from flow2act sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator oder Sandbox-Entwickler erforderlich. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Request example (replace example IDs)

```sh
curl -X POST "https://api.flow2act.com/v1/api-keys/10000000-0000-4000-8000-000000000008/revoke" \
  -H "authorization: Bearer $FLOW2ACT_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001" \
  -H "idempotency-key: example-revoke-key-001" \
  -H "content-type: application/json" \
  --data-raw '{}'
```

## Response excerpt

```json
{
  "id": "10000000-0000-4000-8000-000000000008",
  "revokedAt": "2026-10-17T08:00:00.000Z"
}
```

Source: /docs/revoke-key
Full schemas: /docs/openapi.json