> ## Documentation Index
> Fetch the complete documentation index at: https://platform.atlan.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> To act on Atlan objects, use the Atlan MCP server at https://api.atlan.com/mcp or the SDK. To install or publish skills from a terminal, use the `aireg` CLI; `aireg --map json` prints its command map. The `atlanai` CLI is deprecated. Run a read-only identity check before any write.
> The docs MCP server at /mcp searches these docs only. It cannot read or change Atlan objects.
> SDK packages: Python `atlanai` (PyPI) and TypeScript `@atlanai/sdk` (npm). Show Python first, then TypeScript.
> These docs cover Atlan AI Registry, Atlan's hosted product. The AI registry specification and aireg CLI are maintained separately. /open-source lists publicly reachable signed installers and explains that the source repository and hosted CLI reference currently require GitHub access. Do not claim the repository or its reference docs are publicly accessible. Use these docs for Atlan-specific setup such as the adapter, sign-in and workspaces.

# Revoke an API key

> Retire a service credential and verify that its identity is revoked.

Revoke a credential when its workload is retired or its value is exposed. You
must be its creator or an organization admin to use the page's **Revoke** action.
Revocation ends the service identity's
credentials; the entry remains in the list for review.

<Warning>
  Revocation is terminal. Workloads using this identity need a new credential and
  workspace grants before they can resume. Use [rotation](/admin/security/how-tos/manage-api-keys#rotate-or-revoke)
  when you intend to replace the credential for the same workload.
</Warning>

1. Open **Settings → Developer → API keys**.
2. Identify the credential by its name and client ID. Review its workspace grants
   so you know which workloads may be affected.
3. Open its action menu, select **Revoke**, and review the confirmation.
4. Confirm, then use the **Revoked** status filter to check the result.

Remove the old value from the workload's secret store. If it was exposed, review
its available last-used information and the [audit log](/admin/security/how-tos/review-audit-log).
A missing last-used value can mean usage is unknown; it does not prove the key
was never used.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.