API keys
Change API key privileges
Replaces the target API key scope list for the caller's organization and records the privilege change in the audit chain.
- Endpoint
- PATCH
/api-keys/{id}/privileges - Auth
X-API-Key- Body
{ scopes }- Returns
200 { id, organizationId, publicId, maskedKey, … }
Request
Responses
- 200
- 400
- 401
- 404
- 409
- default
The request has succeeded.
Bad Request: malformed request syntax or validation failure before domain handling.
Unauthorized: missing, expired, revoked, or invalid API Key credential.
Not Found: requested API Key is absent or hidden by tenant scoping.
Conflict: the target API Key is not active (revoked, expired or already rotating), so it can no longer be changed or rotated.
Server Error: unexpected Core API failure returned through a safe JSON error body.