Revoke API Key

Revokes an API key by its ID, so it can no longer be used. This action is irreversible.

The key stops working immediately and drops out of GET /v1/keys, but the record is retained with when it was revoked and by whom.

Requirements:

Key must belong to the authenticated user’s workspace

Key Features:

Permanently revoke API key access while retaining the audit record
Idempotent operation (safe to retry)
Optional Idempotency-Key header for safe retries

Important:

This action cannot be undone
Any applications using this key will immediately lose access
Returns 204 even if the key doesn’t exist or is already revoked

Common Use Cases:

Revoke compromised keys
Clean up unused keys
Implement key rotation (revoke old, create new)
Offboard team members

Required permissions: auth:keys:write. Key presets that include them: FULL. See key permissions.

POST

keys

{key_id}

revoke

Revoke API Key

curl --request POST \
  --url https://api.fal.ai/v1/keys/{key_id}/revoke \
  --header 'Authorization: <api-key>'

const options = {method: 'POST', headers: {Authorization: '<api-key>'}};

fetch('https://api.fal.ai/v1/keys/{key_id}/revoke', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "error": {
    "type": "authorization_error",
    "message": "Authentication required"
  }
}

{
  "error": {
    "type": "authorization_error",
    "message": "Access denied"
  }
}

{
  "error": {
    "type": "rate_limited",
    "message": "Rate limit exceeded"
  }
}

{
  "error": {
    "type": "server_error",
    "message": "An unexpected error occurred"
  }
}

Authorizations

Authorization

string

header

required

Key on the FULL preset, or any key whose permissions include the ones this API lists. Prefix it with "Key ", e.g. Authorization: Key YOUR_API_KEY

Headers

Idempotency-Key

string

Optional idempotency key for safe request retries

Example:

"550e8400-e29b-41d4-a716-446655440000"

Path Parameters

key_id

string

required

Unique identifier of the API key to revoke

Minimum string length: 1

Example:

"abc123def456"

Response

API key revoked successfully (or already revoked)

⌘I

Revoke API Key

curl --request POST \
  --url https://api.fal.ai/v1/keys/{key_id}/revoke \
  --header 'Authorization: <api-key>'

const options = {method: 'POST', headers: {Authorization: '<api-key>'}};

fetch('https://api.fal.ai/v1/keys/{key_id}/revoke', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "error": {
    "type": "authorization_error",
    "message": "Authentication required"
  }
}

{
  "error": {
    "type": "authorization_error",
    "message": "Access denied"
  }
}

{
  "error": {
    "type": "rate_limited",
    "message": "Rate limit exceeded"
  }
}

{
  "error": {
    "type": "server_error",
    "message": "An unexpected error occurred"
  }
}