Revoke many Xquik API keys at once in 1 request

{
  "revoked": [
    "43"
  ]
}

{
  "error": "invalid_input",
  "message": "Invalid input. Check the request body."
}

{
  "error": "unauthenticated",
  "message": "Authentication required. Provide a valid API key or bearer token."
}

{
  "error": "session_required",
  "message": "API keys & OAuth tokens cannot use this route. Sign in at dashboard.xquik.com/account instead."
}

{
  "error": "rate_limit_exceeded",
  "message": "Too many requests. Try again later.",
  "retryAfter": 60
}

POST

api-keys

bulk-revoke

Revoke many Xquik API keys at once in 1 request

curl --request POST \
  --url https://xquik.com/api/v1/api-keys/bulk-revoke \
  --header 'Content-Type: <content-type>' \
  --header 'Cookie: <cookie>' \
  --header 'Origin: <origin>' \
  --header 'x-api-key: <api-key>' \
  --data '
{
  "ids": [
    "<string>"
  ]
}
'

import requests

url = "https://xquik.com/api/v1/api-keys/bulk-revoke"

payload = { "ids": ["<string>"] }
headers = {
    "Cookie": "<cookie>",
    "Origin": "<origin>",
    "Content-Type": "<content-type>",
    "x-api-key": "<api-key>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Cookie: '<cookie>',
    Origin: '<origin>',
    'Content-Type': '<content-type>',
    'x-api-key': '<api-key>'
  },
  body: JSON.stringify({ids: ['<string>']})
};

fetch('https://xquik.com/api/v1/api-keys/bulk-revoke', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://xquik.com/api/v1/api-keys/bulk-revoke"

	payload := strings.NewReader("{\n  \"ids\": [\n    \"<string>\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Cookie", "<cookie>")
	req.Header.Add("Origin", "<origin>")
	req.Header.Add("Content-Type", "<content-type>")
	req.Header.Add("x-api-key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "revoked": [
    "<string>"
  ]
}

Clean up old or leaked keys in 1 request. Xquik revokes each listed key that belongs to your account and answers with the IDs it revoked. It skips IDs of unknown keys and of other accounts’ keys, so a retry is safe.

Free. This endpoint does not consume credits.

curl -X POST https://dashboard.xquik.com/api/v1/api-keys/bulk-revoke \
  -H "Cookie: __Host-xquik_session=YOUR_SESSION_COOKIE" \
  -H "Origin: https://dashboard.xquik.com" \
  -H "Sec-Fetch-Site: same-origin" \
  -H "Content-Type: application/json" \
  -d '{"ids": ["42", "43"]}' | jq

const response = await fetch("https://dashboard.xquik.com/api/v1/api-keys/bulk-revoke", {
  method: "POST",
  headers: {
    Cookie: "__Host-xquik_session=YOUR_SESSION_COOKIE",
    Origin: "https://dashboard.xquik.com",
    "Sec-Fetch-Site": "same-origin",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ ids: ["42", "43"] }),
});
const { revoked } = await response.json();
console.log(revoked);

import requests

response = requests.post(
    "https://dashboard.xquik.com/api/v1/api-keys/bulk-revoke",
    cookies={"__Host-xquik_session": "YOUR_SESSION_COOKIE"},
    headers={"Origin": "https://dashboard.xquik.com", "Sec-Fetch-Site": "same-origin"},
    json={"ids": ["42", "43"]},
)
print(response.json()["revoked"])

package main

import (
	"bytes"
	"fmt"
	"io"
	"log"
	"net/http"
)

func main() {
	body := bytes.NewBufferString(`{"ids": ["42", "43"]}`)
	req, err := http.NewRequest("POST", "https://dashboard.xquik.com/api/v1/api-keys/bulk-revoke", body)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Origin", "https://dashboard.xquik.com")
	req.Header.Set("Sec-Fetch-Site", "same-origin")
	req.AddCookie(&http.Cookie{Name: "__Host-xquik_session", Value: "YOUR_SESSION_COOKIE"})

	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer resp.Body.Close()

	answer, err := io.ReadAll(resp.Body)
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println(string(answer))
}

Headers

Your signed-in dashboard session cookie, __Host-xquik_session. API keys and OAuth tokens get 403 session_required.

string

required

Must be https://dashboard.xquik.com, sent with Sec-Fetch-Site set to same-origin. The dashboard sends both.

string

required

Must be application/json.

Body

string[]

required

IDs of the keys to revoke, from 1 to 100. Get them from List API keys.

Response

200 OK

string[]

IDs of your keys that are now revoked, newest first. A key you had already revoked still appears. Unknown IDs and other accounts’ keys never do. A repeated ID appears once.

{ "revoked": ["42", "43"] }

400 Invalid input

{
  "error": "invalid_input",
  "message": "Send ids as a list of 1 to 100 API key IDs."
}

ids was missing, empty, longer than 100, or held a value that is not a numeric ID. Xquik revokes nothing.

401 Unauthenticated

{ "error": "unauthenticated" }

Missing, expired, or invalid dashboard session cookie.

429 Rate limited

{
  "error": "rate_limit_exceeded",
  "message": "Too many requests. Try again later.",
  "retryAfter": 60
}

Too many requests. Wait for the Retry-After header before retrying.

Revocation is immediate and permanent. Every request with a revoked key returns 401 Unauthenticated. Create a new key if you need one.

API key revocation requires a same-origin dashboard session. API keys and OAuth bearer tokens cannot revoke account keys.Related. Revoke API Key · List API Keys · Create API Key

{
  "revoked": [
    "43"
  ]
}

{
  "error": "invalid_input",
  "message": "Invalid input. Check the request body."
}

{
  "error": "unauthenticated",
  "message": "Authentication required. Provide a valid API key or bearer token."
}

{
  "error": "session_required",
  "message": "API keys & OAuth tokens cannot use this route. Sign in at dashboard.xquik.com/account instead."
}

{
  "error": "rate_limit_exceeded",
  "message": "Too many requests. Try again later.",
  "retryAfter": 60
}

Revoke many Xquik API keys at once in 1 request

curl --request POST \
  --url https://xquik.com/api/v1/api-keys/bulk-revoke \
  --header 'Content-Type: <content-type>' \
  --header 'Cookie: <cookie>' \
  --header 'Origin: <origin>' \
  --header 'x-api-key: <api-key>' \
  --data '
{
  "ids": [
    "<string>"
  ]
}
'

import requests

url = "https://xquik.com/api/v1/api-keys/bulk-revoke"

payload = { "ids": ["<string>"] }
headers = {
    "Cookie": "<cookie>",
    "Origin": "<origin>",
    "Content-Type": "<content-type>",
    "x-api-key": "<api-key>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Cookie: '<cookie>',
    Origin: '<origin>',
    'Content-Type': '<content-type>',
    'x-api-key': '<api-key>'
  },
  body: JSON.stringify({ids: ['<string>']})
};

fetch('https://xquik.com/api/v1/api-keys/bulk-revoke', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://xquik.com/api/v1/api-keys/bulk-revoke"

	payload := strings.NewReader("{\n  \"ids\": [\n    \"<string>\"\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Cookie", "<cookie>")
	req.Header.Add("Origin", "<origin>")
	req.Header.Add("Content-Type", "<content-type>")
	req.Header.Add("x-api-key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "revoked": [
    "<string>"
  ]
}

Overview

X API

X write

Trends

Radar

Account

API keys

Guest wallets

Credits

X accounts

Monitors

Events

Webhooks

Draws

Extractions

Compose

Drafts

Styles

Support

Revoke many Xquik API keys at once in 1 request

Headers

Body

Response

200 OK

400 Invalid input

401 Unauthenticated

429 Rate limited

​Headers

​Body

​Response

​200 OK

​400 Invalid input

​401 Unauthenticated

​429 Rate limited

Headers

Body

Response

200 OK

400 Invalid input

401 Unauthenticated

429 Rate limited