Revoke the reseller API key (soft delete)

POST 
/admin/keys/:id/revoke

Immediately deactivates the key (revoked_at set) + invalidates the APCu auth cache. The record is preserved for audit. The reseller_id in the body is an ownership guard — another reseller's key returns 404 key_not_found.

Request

Responses

200

Key revoked

401

X-Admin-Token missing or wrong (unauthorized)

403

Admin API not configured (admin_disabled)

404

No key, revoked/expired, or belongs to another reseller (key_not_found)

422

reseller_id missing/invalid (invalid_input)