# revoke_api_key Permanently revokes an API key. This is irreversible — the key will immediately stop working. Requires admin scope. Agent View of the PolicyLayer registry record for `revoke_api_key`. HTML page: https://policylayer.com/tools/de-agentview-agentview-mcp/revoke-api-key ## Facts - Tool: `revoke_api_key` - Server: agentView (`https://agentview.de/mcp`) — https://policylayer.com/tools/de-agentview-agentview-mcp.md - Homepage: https://github.com/https://agentview.de/mcp - Risk category: Destructive (Critical risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server rate-limited: no - Parameters: 2 (1 required) - Recommended policy verdict: Hidden ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `key_id` | string | yes | The ID of the key to revoke (from list_api_keys). | | `access_token` | string | no | Optional bearer token; prefer session_request_id. | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "revoke_api_key", "arguments": { "key_id": "" } } } ``` ## Why revoke_api_key is rated Critical Revoking an API key is an irreversible action that destroys the ability of systems or users to authenticate and access the agentview service. While not data deletion, it permanently disables a critical authentication credential and cannot be undone (a new key must be created instead). This fits the Destructive category as it is an action that cannot be reversed. From the tool's own definition: "Tool description explicitly states 'Permanently revokes an API key' and 'This is irreversible — the key will immediately stop working.' The use of 'Permanently' and 'irreversible' combined with the destructive action of disabling authentication credentials…" Risk signals: Handles credentials or secrets (access_token) · Admin/system-level operation ## Use case AI agents call revoke_api_key to permanently remove resources in agentView, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo. ## Recommended policy (PolicyLayer) Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches agentView: ```json { "version": "1", "default": "deny", "hide": [ "revoke_api_key" ] } ``` ## Other tools on agentView (56) - `delete_asset` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/delete-asset.md - `delete_data_slot` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/delete-data-slot.md - `delete_display` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/delete-display.md - `delete_organization` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/delete-organization.md - `logout` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/logout.md - `remove_display_from_org` — Destructive — https://policylayer.com/tools/de-agentview-agentview-mcp/remove-display-from-org.md - `broadcast_content` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/broadcast-content.md - `claim_display` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/claim-display.md - `fetch` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/fetch.md - `get_account` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-account.md - `get_agent_artifact` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-agent-artifact.md - `get_asset` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-asset.md - `get_auth_session` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-auth-session.md - `get_data_slot` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-data-slot.md - `get_display` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-display.md - `get_display_preview_url` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-display-preview-url.md - `get_license_info` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-license-info.md - `get_organization` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-organization.md - `get_public_status` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-public-status.md - `get_storage_usage` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-storage-usage.md - `get_store_template_content` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-store-template-content.md - `get_store_template_details` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-store-template-details.md - `get_store_template_install_options` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/get-store-template-install-options.md - `list_api_keys` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-api-keys.md - `list_assets` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-assets.md - `list_data_slots` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-data-slots.md - `list_display_categories` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-display-categories.md - `list_displays` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-displays.md - `list_organizations` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-organizations.md - `list_store_categories` — Read — https://policylayer.com/tools/de-agentview-agentview-mcp/list-store-categories.md - …and 26 more: https://policylayer.com/tools/de-agentview-agentview-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=de-agentview-agentview-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/de-agentview-agentview-mcp