> ## Documentation Index
> Fetch the complete documentation index at: https://help.standards.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoking Access

An API key can be temporarily disabled or permanently deleted to immediately halt its use in retrieving authorization tokens.

<Steps>
  <Step title="Find the key in your workspace settings">
    From the `API` tab on the workspace settings page, locate the API key by name in the table.
  </Step>

  <Step title="Select &#x22;Disable&#x22; or &#x22;Delete&#x22;">
    Open the menu in the right-most column of the table and select `Disable` or `Delete`. A disabled key can later be re-enabled through the same menu, whereas a deleted key cannot be recovered.

    <Frame>
      <img src="https://mintcdn.com/standards/szmBQpByAbnMye-H/images/api-04.png?fit=max&auto=format&n=szmBQpByAbnMye-H&q=85&s=185d42bc7427471c51f61e43917c2e69" alt="Api 04" width="1200" height="600" data-path="images/api-04.png" />
    </Frame>
  </Step>
</Steps>

Once a key has been disabled or deleted:

* Any attempts to retrieve an authorization token using the key will receive an `Unauthorized` response.
* Existing authorization tokens will continue to function until they expire (expiration time is 15 minutes).
* Existing refresh tokens will no longer be able to be exchanged for authorization tokens.