Skip to main content
DELETE
Revoke all managed API keys

Authorizations

Authorization
string
header
required

Opaque vlm_ token valid for 30 minutes. API-key management only; ledger and MCP routes reject it. The UI stores it in a separate host-only HttpOnly cookie.

Response

Revoke all API keys and MCP connections, including expired records, and cancel pending OAuth authorization codes. An optional kind filter revokes only manual keys or MCP connections. Dashboard and management sessions remain signed in. The environment AUTH_KEY is unaffected.

revoked_count
integer
required
Required range: 0 <= x <= 9007199254740991