MCP Gateway
ApiUser api keys

Revoke an API key

Immediately and irreversibly revoke an API key owned by the authenticated user. An optional revocation reason can be provided for audit logging.

DELETE
/api/v1/users/me/api-keys/{key_id}

Authorization

User API Key
AuthorizationBearer <token>

User API key (mgw_usr_live_* or mgw_usr_test_*)

In: header

Path Parameters

key_id*string
Formatuuid
access_token?|

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X DELETE "https://loading/api/v1/users/me/api-keys/497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "Content-Type: application/json" \  -d '{}'
Empty
{
  "detail": [
    {
      "loc": [
        "string"
      ],
      "msg": "string",
      "type": "string",
      "input": null,
      "ctx": {}
    }
  ]
}

List API keys

List API keys for the authenticated user. By default only active keys are returned; set include_revoked=true to include revoked keys.

Rotate an API key

Rotate an API key by creating a new replacement key. The old key can optionally remain active for a grace period to allow smooth transition. The new key is returned only in this response.