Skip to main content
DELETE
/
api
/
v1
/
partners
/
api-key
Revoke partner API key
curl --request DELETE \
  --url https://app.puffle.ai/api/v1/partners/api-key \
  --header 'Authorization: Bearer <token>'
{
  "success": true
}

​
Overview

Revoke the caller’s partner API key. Soft delete — sets is_active = false on the api_partners row. After revocation, createPartnerApiKey can mint a fresh key. Idempotent: calling when no active key exists still returns { success: true }.

​
AI agent notes

Session-authenticated. This endpoint uses the user’s browser session (not a Bearer token) — the key being revoked is the one tied to the logged-in user.Immediate effect. The revoked key stops authenticating API calls on the next request. No grace period.No hard delete. The row is kept with is_active = false for audit/history. The key’s hash is also preserved, so the same raw key cannot be re-activated — generating a new one produces a different hash.Related: Generate a partner API key, Check partner API key status.

Authorizations

​
Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

Key revoked (or was already revoked).

​
success
enum<boolean>
required
Available options:
true