> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tokenlab.sh/llms.txt
> Use this file to discover all available pages before exploring further.
# Update API Key
> Updates an existing user API key for the current organization.
## Overview
Use this endpoint to update the name, usage limit, allowed models, expiry, or status of an existing user API key.
## Request Body
At least one field must be provided.
| Field | Type | Default / Limits | Notes |
| --------------- | -------------- | ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
| `status` | enum | - | `active`, `inactive`, `revoked` |
| `name` | string | length `1-50` | Updated display name |
| `limitAmount` | number \| null | min `0`, input max `1000000` | `null` = unlimited, `0` = zero quota. Positive values are normalized to a stored cap that cannot exceed `100000` USD equivalent. |
| `limitCurrency` | enum | default `USD` | USD only. Sending `CNY` returns `400 currency_retired`. |
| `models` | string\[] | - | Updated model allowlist |
| `expiresAt` | string \| null | RFC3339 datetime | `null` clears the expiry |
## Notes
* Monetary fields are USD-only. `CNY` inputs are retired and return `400 currency_retired`.
* Hard delete is intentionally not supported in Management API v1.
* `revoked` is terminal for ordinary operational use; create a new key instead of expecting a future un-revoke flow.
## Example
```bash cURL theme={null}
curl -X PATCH "https://api.tokenlab.sh/v1/management/api-keys/key_abc123def456" \
-H "Authorization: Bearer mt-your-management-token" \
-H "Content-Type: application/json" \
-d '{
"status": "inactive",
"limitAmount": 0
}'
```
## Request / Response
Use the interactive OpenAPI panel above for the exact schema and response fields.
## Response example
```json 200 OK theme={null}
{
"id": "key_abc123def456",
"name": "Backend Worker",
"key_prefix": "sk-live...",
"status": "inactive",
"limit_amount": 0,
"limit_amount_decimal": "0",
"used_amount": 148.25,
"used_amount_decimal": "148.25",
"models": [
"gpt-5-mini",
"claude-3-7-sonnet"
],
"expires_at": "2026-12-31T23:59:59.000Z",
"last_used_at": "2026-07-08T03:12:45.000Z",
"created_at": "2026-07-01T10:00:00.000Z"
}
```
## Important fields
API key identifier used in follow-up Management API calls.
Display name for the API key.
Non-secret key prefix for display and support.
One of `active`, `inactive`, or `revoked`.
Spending cap in USD as a JSON number for display. `null` means unlimited.
Exact spending cap in USD as a decimal string. `null` means unlimited.
Accumulated usage in USD as a JSON number for display.
Exact accumulated usage in USD as a decimal string.
Per-key model allowlist. Empty array means no additional key-level model restriction.
ISO timestamp when the key expires, or `null` for no expiry.
ISO timestamp for the most recent use, or `null` when unused.
ISO creation timestamp.