API ReferenceAPI Keys

Publicly revoke leaked Composio API keysv3.1

POST
/api/v3.1/api_key_revocation

Public endpoint for reporting and revoking Composio API keys that have been leaked (e.g. via the GitHub Secret Scanning Partner Program, third-party scanners, or self-reported leaks). Accepts project (ak_), user (uak_), and org (oak_*) keys in a single batch. Matched keys are revoked and stop working immediately. The response shape is constant regardless of whether any submitted key matched, so callers cannot use this endpoint to probe key existence. The endpoint is rate limited; requests over the limit receive a 429.

Request Body

application/json

api_keysarray of stringRequired

Composio API keys to revoke. Accepts project (ak_), user (uak_), and org (oak_*) keys. Each batch is capped at 100 entries.

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/api/v3.1/api_key_revocation" \  -H "Content-Type: application/json" \  -d '{    "api_keys": [      "string"    ]  }'
{  "received": true}
Edit this page on GitHub