One click cuts off whatever was using the key.
If a key has been exposed, you're retiring an integration, or you want to clean up keys that aren't in use anymore, revoke them.
Revoke a key
Open your workspace settings.
Go to API Keys.
Find the key in the list.
Choose Revoke.
Confirm when prompted.
The key stops working immediately. Any request made with the revoked key after this point will be rejected.
What happens to the integration that was using it
Any tool, script, or automation that was using the revoked key will start getting authentication errors. That's the point — if the key was exposed, you wanted to cut off whatever was using it.
If you revoked a key in active use by mistake, create a new key and update the tool that was using it. Revoked keys can't be restored.
Good housekeeping
A few habits that keep your keys in good shape:
Revoke keys you're not using. Old keys lying around are old keys that can be misused.
Rotate keys periodically. Generate a new key, switch your integration to it, then revoke the old one.
One key per integration. Easier to revoke selectively if you ever need to.
Where to go next
How do I create an API key?
What can I build with an Ambit API key?