Revoke a merchant API key
/v1/merchants/{id}/api-keys/{keyId}AuthorizationBearer token (JWT) · headerrequiredClerk human owner session JWT; iss must equal the configured Clerk issuer and the identity must be a human (not agent) owner with a verified email.
AuthorizationOAuth2 access token · headerrequiredagentsub:owneridstringrequiredkeyIdstringrequiredIdempotency-KeystringrequiredRequired only where this parameter is listed. Same payload/key recovers prior operation; secret replays omit plaintext.
Revocation record
objectunauthorized problem; live 401s advertise WWW-Authenticate: Bearer resource_metadata=...
typestringrequiredtitlestringrequiredstatusintegerrequiredcodestringrequiredIdentity, ownership, scope or policy denied (human_required, owner_claim_required, scope_required, FROZEN, CAP_EXCEEDED, SCOPE_FORBIDDEN)
typestringrequiredtitlestringrequiredstatusintegerrequiredcodestringrequiredRuntime or provider configuration unavailable (runtime_configuration_required, signing_configuration_required, runtime_unavailable, workspace_unavailable, provider_configuration_required)
typestringrequiredtitlestringrequiredstatusintegerrequiredcodestringrequired