Revoke API key
Revokes an API key. Revoked keys cannot be used for authentication. A key that is already revoked is refused with 409 API_KEY_ALREADY_REVOKED and nothing is written: its original revocation time and actor stand.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Path Parameters
Response
Default Response
Key prefix + last 4 chars (e.g., "mqu_...x7Kf")
policies:read, policies:write, decisions:evaluate, decisions:read, decisions:write, alerts:read, alerts:write, audit:read, audit:admin, api-keys:admin, members:read, members:write, tenants:provision, authoring:capability, run:orchestrate admin, operator, auditor, viewer