How-to

Revoking an MCP key

Revoking an MCP key ​

Revoking an MCP key closes the secret. There is no separate "sign out of every agent": the protocol has no session. The refusal is visible on the next request.

Prerequisites ​

  • The key status is ACTIVE.
  • You revoke your own key, or you are an administrator of the team that owns the key.
  • The MCP keys tab lists your keys in all of your teams. Other people's keys are not listed on this tab. An administrator revokes someone else's key in the same team when they have that row's mcp_key_id.

No restore

A revoked key is not turned back on. If access is still needed, issue a new secret.

Steps ​

  1. Sign in to the app.
  2. Open your profile from the account menu.
  3. Open the MCP keys tab.
  4. In Your keys, find the row with status ACTIVE.
  5. Press Revoke.
  6. Confirm the dialog. The dialog says the agent is rejected from the next request.

Result ​

The row status becomes REVOKED. The secret is not shown again. The key row stays in the list. The next request that carries this secret does not pass.

Version 1.0.0 · Last updated 2026-09-30

Did this page help?