Account

Revoke an API key

DELETE/api/merchants/api-keys/:keyId

Deactivate a key immediately. Any integration still using it starts receiving 401 on the next call.

Dashboard-only (merchant JWT).
Irreversible — a revoked key cannot be reactivated. Create a new one and roll your integration over to it.
Revoking a key does not touch your wallet connection or move any funds; it only stops that credential from authenticating.

Authentication

Requires a dashboard session JWT in the Authorization: Bearer … header.

keyIdstringrequired

from POST or GET /api/merchants/api-keys

DELETE/api/merchants/api-keys/:keyId

curl --request DELETE "https://api.trevi.cash/api/merchants/api-keys/KEY_ID" \
  --header "Authorization: Bearer $TREVI_JWT"

Was this page helpful?