Api Update Key Partial Update

PATCH

https://api.respan.ai/api/update-key/:id/

PATCH

/api/update-key/:id/

$ curl -X PATCH https://api.respan.ai/api/update-key/id/ \
>      -H "Authorization: Bearer <token>" \
>      -H "Content-Type: application/json" \
>      -d '{}'

200Updated

1 {
2   "id": "string",
3   "api_key": "string",
4   "suffix": "string",
5   "tags": [
6     {
7       "id": "string",
8       "name": "string",
9       "color": "string",
10       "created_at": "2024-01-15T09:30:00Z",
11       "updated_at": "2024-01-15T09:30:00Z"
12     }
13   ],
14   "status": "active",
15   "prefix": "string",
16   "hashed_key": "string",
17   "created": "2024-01-15T09:30:00Z",
18   "key_usage": 1,
19   "last_used": "2024-01-15T09:30:00Z",
20   "spending_in_period": 1.1,
21   "is_test": true,
22   "revoked_at": "2024-01-15T09:30:00Z",
23   "revoked_by_email": "string",
24   "user": 1,
25   "organization": 1,
26   "created_by": 1,
27   "updated_by": 1,
28   "project": "string",
29   "name": "string",
30   "revoked": true,
31   "expiry_date": "2024-01-15T09:30:00Z",
32   "max_usage": 1,
33   "rate_limit": 1.1,
34   "spending_limit": 1.1,
35   "is_temporary": true
36 }

PATCH handler with superadmin lock and field protection.

Checks:

Object lock (is_managed=True -> non-superadmins can’t modify)
Field protection (non-superadmins can’t modify specific fields)

Authentication

AuthorizationBearer

JWT access token or Respan API key

Path parameters

idstringRequired

Request

This endpoint expects an object.

projectstring or nullOptional>=1 character

namestringOptional1-50 characters

A free-form name for the API key. Need not be unique. 50 characters max.

revokedbooleanOptional

If the API key is revoked, clients cannot use it anymore. (This cannot be undone.)

expiry_datedatetime or nullOptional

Once API key expires, clients cannot use it anymore.

max_usageintegerOptional-2147483648-2147483647

rate_limitdouble or nullOptional

spending_limitdouble or nullOptional

is_temporarybooleanOptional

Response

idstringRead-only

api_keystringRead-only

suffixstringRead-only

tagslist of objectsRead-only

statusenum

active - Active
expired - Expired
revoked - Revoked

prefixstringRead-only

hashed_keystringRead-only

createddatetimeRead-only

key_usageintegerRead-only

last_useddatetimeRead-only

spending_in_perioddoubleRead-only

is_testbooleanRead-only

revoked_atdatetime or nullRead-only

revoked_by_emailstring or nullRead-only

userinteger or nullRead-only

organizationinteger or nullRead-only

created_byinteger or nullRead-only

updated_byinteger or nullRead-only

projectstring or null

namestring<=50 characters

A free-form name for the API key. Need not be unique. 50 characters max.

revokedboolean

If the API key is revoked, clients cannot use it anymore. (This cannot be undone.)

expiry_datedatetime or null

Once API key expires, clients cannot use it anymore.

max_usageinteger-2147483648-2147483647

rate_limitdouble or null

spending_limitdouble or null

is_temporaryboolean