Revoke Credential
Refused everywhere within 30 seconds; open runs using it are cancelled.
HTTPBearerAuthorizationBearer <token>Bearer credential. API keys look like sqk_<geo>_<key_id>_<secret>: treat them as opaque and never put one in a browser. Older keys without the geo part stay valid until rotated. Find a geo's endpoints through GET /.well-known/sparq-discovery before sending a key.
credential_id*Credential IduuidSparq-Workspace?stringFor a person signed in to a console with several workspaces: the workspace this call is for, one of their memberships (listMyMemberships). Without it such a person gets workspace_required (400); a workspace they are not a member of is forbidden. It never grants anything, and other callers' credentials ignore it.
uuidIdempotency-Key?stringMakes a retry safe: the same key, route and body within 24 hours returns the stored response and the same result id. The same key with a different body or route is idempotency_conflict; while the first request runs, idempotency_in_progress.
8 <= length <= 128application/json- body
reason*Reason1 <= length <= 500Successful Response
application/json- response
credential_id*Credential Iduuidtype*CredentialType"project_api_key""oauth_client""service_identity""user_token_issuer""provider_key""tool_credential"status*CredentialStatus"active""rotated""revoked""expired"owner*workspace_id*Workspace Iduuidproject_id*|nullenvironment*|nullenvironment_id?|nullpurpose*Purposefingerprint*FingerprintFingerprint of the secret or public key; safe to log.
^sha256:[0-9a-f]{16,64}$predecessor_id*|The credential this one replaced by rotation, so history stays continuous.
created_at*Created Atdate-timerotated_at*|nullexpires_at*|nullrevoked_at*|nullcurl -X POST 'http://dev-sparq.centralindia.cloudapp.azure.com:8000/v1/admin/credentials/497f6eca-6276-4993-bfeb-53cbbbba6f08/revoke' \ -H 'Content-Type: application/json' \ -d '{ "reason": "string"}'{ "credential_id": "13c40afa-2996-4a0c-b2e9-68fba9462242", "type": "project_api_key", "status": "active", "owner": { "kind": "person", "name": "string", "contact": "string" }, "workspace_id": "0967198e-ec7b-4c6b-b4d3-f71244cadbe9", "project_id": "405d8375-3514-403b-8c43-83ae74cfe0e9", "environment": "string", "environment_id": "40ef0e48-a11f-4963-a229-e396c9f7e7c4", "purpose": "string", "fingerprint": "string", "predecessor_id": "c8bad2a2-4d3d-486b-89ca-11a0c911eff9", "created_at": "2019-08-24T14:15:22Z", "rotated_at": "2019-08-24T14:15:22Z", "expires_at": "2019-08-24T14:15:22Z", "revoked_at": "2019-08-24T14:15:22Z"}List Credentials GET
A project's credentials, or every credential in the caller's own workspace.
Revoke Credentials POST
> **Not available yet.** This operation is part of the published contract and answers `501 not_implemented` until it is built. The request and response shapes below are final for this contract version. Revoke up to 100 credentials. One result per credential, never all-or-nothing.