Skip to main content
PATCH
Update API Key
This never rotates the secret — a key that leaked stays valid after an update. To invalidate the old secret, use Rotate.

Path

string
required
The key’s ID.

Body

All fields are optional; only what you send is changed.
string
1–40 characters.
string[]
Replaces the full scope list — not a merge. At least one scope from the catalog.
string[]
Replaces the full IP/CIDR list, up to 20 entries. Empty means any IP.

Response

APIApiKey
The updated key. See List API Keys for the field reference.

Errors