Update API Key

curl -X PATCH "https://api.tokenlab.sh/v1/management/api-keys/key_abc123def456" \
  -H "Authorization: Bearer mt-your-management-token" \
  -H "Content-Type: application/json" \
  -d '{
    "status": "inactive",
    "limitAmount": 0
  }'

{
  "id": "key_abc123def456",
  "name": "Backend Worker",
  "key_prefix": "sk-live...",
  "status": "inactive",
  "limit_amount": 0,
  "limit_amount_decimal": "0",
  "used_amount": 148.25,
  "used_amount_decimal": "148.25",
  "models": [
    "gpt-5-mini",
    "claude-3-7-sonnet"
  ],
  "expires_at": "2026-12-31T23:59:59.000Z",
  "last_used_at": "2026-07-08T03:12:45.000Z",
  "created_at": "2026-07-01T10:00:00.000Z"
}

Overview

Use this endpoint to update the name, usage limit, allowed models, expiry, or status of an existing user API key.

Request Body

At least one field must be provided.

Field	Type	Default / Limits	Notes
`status`	enum	-	`active`, `inactive`, `revoked`
`name`	string	length `1-50`	Updated display name
`limitAmount`	number \| null	min `0`, input max `1000000`	`null` = unlimited, `0` = zero quota. Positive values are normalized to a stored cap that cannot exceed `100000` USD equivalent.
`limitCurrency`	enum	default `USD`	USD only. Sending `CNY` returns `400 currency_retired`.
`models`	string[]	-	Updated model allowlist
`expiresAt`	string \| null	RFC3339 datetime	`null` clears the expiry

Notes

Monetary fields are USD-only. CNY inputs are retired and return 400 currency_retired.
Hard delete is intentionally not supported in Management API v1.
revoked is terminal for ordinary operational use; create a new key instead of expecting a future un-revoke flow.

Example

curl -X PATCH "https://api.tokenlab.sh/v1/management/api-keys/key_abc123def456" \
  -H "Authorization: Bearer mt-your-management-token" \
  -H "Content-Type: application/json" \
  -d '{
    "status": "inactive",
    "limitAmount": 0
  }'

Request / Response

Use the interactive OpenAPI panel above for the exact schema and response fields.

Response example

{
  "id": "key_abc123def456",
  "name": "Backend Worker",
  "key_prefix": "sk-live...",
  "status": "inactive",
  "limit_amount": 0,
  "limit_amount_decimal": "0",
  "used_amount": 148.25,
  "used_amount_decimal": "148.25",
  "models": [
    "gpt-5-mini",
    "claude-3-7-sonnet"
  ],
  "expires_at": "2026-12-31T23:59:59.000Z",
  "last_used_at": "2026-07-08T03:12:45.000Z",
  "created_at": "2026-07-01T10:00:00.000Z"
}

Important fields

string

API key identifier used in follow-up Management API calls.

string

Display name for the API key.

string

Non-secret key prefix for display and support.

string

One of active, inactive, or revoked.

number | null

Spending cap in USD as a JSON number for display. null means unlimited.

string | null

Exact spending cap in USD as a decimal string. null means unlimited.

number

Accumulated usage in USD as a JSON number for display.

string

Exact accumulated usage in USD as a decimal string.

string[]

Per-key model allowlist. Empty array means no additional key-level model restriction.

string | null

ISO timestamp when the key expires, or null for no expiry.

string | null

ISO timestamp for the most recent use, or null when unused.

string

ISO creation timestamp.

Core

Text

Files & Batches

Images

Audio & Realtime

Music

Video & Materials

Worlds

3D

Async Jobs

Gemini Native

Management

Overview

Request Body

Notes

Example

Request / Response

Response example

Important fields

​Overview

​Request Body

​Notes

​Example

​Request / Response

​Response example

​Important fields

Overview

Request Body

Notes

Example

Request / Response

Response example

Important fields