API key states
Every API key is either enabled or disabled. A request you authenticate with an enabled key succeeds; a request you authenticate with a disabled key is rejected with HTTP 403.
Disabling a key neither deletes it nor changes the key and its shared secret, so you can enable the same key later and your existing credentials keep working.
Your keys are listed under Developer Tools in the Print API Dashboard, where you can read each key's current state and change it.
Allow up to 5 minutes for a change to take effect
The API keeps the result of each authentication check for 5 minutes, so for that long it can still answer with a decision it reached before you changed the key:
- A key you disabled can keep working for up to 5 minutes.
- A key you enabled can keep being rejected for up to 5 minutes.
Five minutes is the longest either delay lasts. The API may apply your change sooner, and it applies the change within 5 minutes.
Disabling a key does not revoke it on the spot. If someone outside your organization has obtained a key, disable it and then treat the following 5 minutes as time in which that person can still call the API with it.