Revoke a key
Needs an admin key (fx_admin_…), made by the workspace owner in the console — or a signed-in owner or admin. Ordinary API keys are refused with ADMIN_KEY_REQUIRED.
Refused from its very next request — there is no cache to wait for. Revoking an already-revoked key succeeds and changes nothing, so a retried revoke is safe.
Authorization
adminKey Authorization: Bearer fx_admin_<id>_<secret>.
An admin key manages this workspace's ordinary API keys (/v1/api-keys) and can do nothing else.
Only the workspace owner makes one, in the console, optionally limited to IP addresses and given
an expiry. Every request made with one is audited.
In: header
Path Parameters
uuidResponse Body
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/v1/api-keys/497f6eca-6276-4993-bfeb-53cbbbba6f08/revoke"{ "data": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "name": "string", "publicId": "string", "hint": "string", "environment": "live", "scopes": [ "string" ], "lastUsedAt": null, "expiresAt": null, "revokedAt": null, "createdAt": "2019-08-24T14:15:22Z", "limits": null, "createdBy": null, "createdByAdminKey": null }}Rename or re-scope a key PATCH
**Needs an admin key** (`fx_admin_…`), made by the workspace owner in the console — or a signed-in owner or admin. Ordinary API keys are refused with `ADMIN_KEY_REQUIRED`. New scopes replace the old ones and apply from the key's next request. The key itself does not change, so nothing using it needs redeploying. A revoked key cannot be changed. A console session confirms it's you first only when the change widens the key to a scope that can move money or accounts (`trading:execute`, `trading:reduce`, `accounts:write`) it did not already hold, or changes the limits on a key that already has some. Narrowing scopes, renaming, or adding limits to a key that had none, never asks.
Change a member's role PATCH
**Console only — not available with API keys.** Signed-in owners and admins use this from the fxapis console. It is not in the SDKs or the Postman collection. Only the owner changes roles, and the owner's own role cannot be changed here. Takes effect on the member's next request. Making an admin a member also revokes every API key they made in this workspace, in the same change: a member cannot make keys, so none they made may outlive the role. Each revocation is audited, the owner is emailed the list, and `keysRevoked` says how many there were. Keys made by anyone else, or with no recorded maker, are not touched. Making a member an admin revokes nothing.