Skip to main content
DELETE
Revoke API key

Authorizations

Authorization
string
header
required

MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).

X-MeshQu-Tenant-Id
string
header
required

Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.

Path Parameters

id
string<uuid>
required

Response

Default Response

id
string<uuid>
required
tenant_id
string<uuid>
required
name
string
required
key_preview
string
required

Key prefix + last 4 chars (e.g., "mqu_...x7Kf")

scopes
enum<string>[]
required
Available options:
policies:read,
policies:write,
decisions:evaluate,
decisions:read,
decisions:write,
alerts:read,
alerts:write,
audit:read,
audit:admin,
api-keys:admin,
members:read,
members:write,
tenants:provision
role
enum<string>
required
Available options:
admin,
operator,
auditor,
viewer
expires_at
string<date-time> | null
required
last_used_at
string<date-time> | null
required
is_active
boolean
required
created_at
string<date-time>
required
created_by
string | null
required
revoked_at
string<date-time> | null
required
revoked_by
string | null
required