Revoking an API key in LIGR Live immediately disables it, preventing any further external access to your Organisation's data through that key.
When to Revoke an API Key
You should revoke an API key whenever it is no longer needed or if you suspect it has been compromised. Common reasons include:
• A team member with access to the key has left your Organisation
• The key was shared or exposed publicly by mistake
• You are rotating keys as part of regular security maintenance
• An integration using the key is no longer in use
Prerequisites
Before you begin, make sure you have:
• An active LIGR Live account with Owner or Admin permissions
• Access to the Profile area of your Organisation
• Awareness of any integrations currently using the key, so you can update or replace them after revocation
Steps to Revoke an API Key
1. Log in to LIGR Live.
2. Open your Profile from the account menu.
3. Navigate to the Permissions and API section.
4. Locate the API key you want to revoke in the list of active keys.
[ Image placeholder: Permissions and API page showing a list of active API keys with revoke options ]
1. Select the Revoke option next to the relevant key.
2. Confirm the action when prompted.
[ Image placeholder: Confirmation dialog asking the user to confirm revocation of the selected API key ]
Once confirmed, the key will be disabled immediately and can no longer be used to authenticate requests.
Tips
• Before revoking a key, identify any services or integrations that rely on it so you can generate a replacement key and update them without downtime.
• Label or name your API keys clearly when you create them. This makes it much easier to identify the correct key to revoke later.
• Revoke keys regularly as part of routine security hygiene, especially after staffing changes.
• If you need a replacement, generate a new API key first, update your integrations, and then revoke the old key.
Common Issues
The key still appears to work after revocation Revocation takes effect immediately, but any cached sessions or requests already in progress may complete. New requests using the revoked key will fail.
I can't see the Permissions and API section This section is only available to users with the appropriate permission level. If you are a standard User or Gameday Operator, ask your Owner or Admin to revoke the key on your behalf.
I revoked the wrong key Revoked keys cannot be reactivated. You will need to generate a new API key and update any integrations that were using the original key.
An integration has stopped working unexpectedly Check whether the API key it was using has been revoked. If so, generate a new key and update the integration's configuration.