Conceptrevocation / 密钥作废
Key Revocation
The operation of marking an API key as invalid in the provider's control plane, after which all requests carrying that key are rejected. Only the key issuer can perform it, distinguishing it from a deletion operation that merely removes platform-side records.
Timeline (last 90 days)
Oct 19
The correct order for handling keys is: first revoke (or rotate) the key in the provider's console, then return to the intermediary platform to clean up residual records, and finally check usage and billing before revocation; reversing the order makes locating and revoking harder.
Unverified50%