Disable Project Key Agentic
Toggle agentic use OFF for a Project Key.
Erases agentic_secret_blob and clears the flag. Does NOT rotate the
API credential - the PK keeps working for non-agentic uses (raw API calls,
Kafka). Idempotent on already-disabled PKs.
Rate limit: 5/min/tenant. Audit-logged with action=disable / disable_noop.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Response
Successful Response
Summary response for listing Project Keys (no secrets).
full, read-only, agent-operator, infra-admin Whether this Project Key is wired up as the auth blob behind the Streamkap MCP. Toggled via POST /project-keys/{id}/enable-agentic and disable-agentic. When true, the encrypted credential lives on the PK row (server-side only); the agent picker on the FE filters to PKs where this is true.
Always masked to '********' on responses when agentic_enabled is true; null otherwise. Server-derived only - PUT/PATCH bodies that include this field are rejected with 422.