Revoke an API key.
Revocation is permanent — there is no re-enable, so mint a replacement rather than expecting to undo this. It takes effect immediately on the replica handling the request and within 5 seconds on every other replica. Keys seeded from configuration (the bootstrap admin, the dashboard assistant) are protected and cannot be revoked over the API.
Authorizations
A scoped AgentEye API key. Mint one in the dashboard under Settings → API keys, or with POST /v1/keys. Each endpoint names the permission it requires; a key without it gets 403 and a required_permission field naming what was missing.
Path Parameters
The key's id, as returned by GET /keys.
Response
The key is revoked.

