Revoke All AgentID Sign-In Keys

Invalidate every current public-key credential in the caller's organization by advancing its AgentID key generation. The caller must be organization-scoped and either have `api_key_delete` or, for a verified self-serve agent organization, use an unrestricted unmanaged bearer credential. No request body is accepted. `Idempotency-Key` is required and must be a UUID. Reusing the same UUID returns the original permanent receipt without advancing the generation again. A new UUID performs a new generation advance.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Headers

Idempotency-KeystringRequiredformat: "uuid"

Required UUID identifying this revoke-all operation permanently.

Response

This endpoint returns an object.
previous_generationinteger>=0
current_generationinteger>=1
revoked_atdatetime

Errors

400
Validation Error
409
Conflict Error