How to revoke a ClearRun API key

Open the API keys page, find the key by its name and first characters, and choose Revoke. The key stops working right away. Your other keys keep working.

Last updated

Steps

  1. Open the API keys page

    Go to api.clearrun.net/account/keys and sign in.

  2. Revoke the key

    Find the key by its name and first characters, and choose Revoke. It stops working right away.

  3. Remove it where you used it

    Take the old key out of your environment variables, CI secrets and MCP configs. On your own computer, run clearrun logout if you saved it with clearrun login.

Revoke one key or turn off API access?

Revoke one key or turn off API access?
RevokeTurn off API access
StopsOne keyEvery key on the account
WhenRight awayRight away, until you turn it back on
WhereAPI keys pageAccount settings

What a revoked key returns

401 { "error": "Unauthorized" }, with no code field. That is the same reply as for a key that never existed. There is no delay: the next request with that key fails.

Replacing a key in use?

Create the new key and switch to it first, then revoke the old one. See How to rotate a ClearRun API key.