Admin
Revoke an API key or a Passport access token
Dual-purpose endpoint. When api_key_id is supplied, marks the matching ApiKey as revoked via ApiKeyService::revoke (after the developer_settings permission check); the key must belong to the calling admin within the active client. When token_id is supplied instead, looks up the token on request->user()->tokens and calls revoke() on the Passport access token (no extra permission gate). Exactly one of api_key_id / token_id is required.
POST
Revoke an API key or a Passport access token
Authorizations
Passport bearer token authentication for legacy admin sessions.
Body
application/json