GetItDoneGetItDone Docs
API ReferenceAPI keys

Revoke an API key

DELETE
/v1/api-keys/{key_id}

Revokes an API key (either generation) — org-scoped; an id from another organization or an unknown id answers 404 resource_not_found (no cross-org existence oracle). A key revoking ITSELF is allowed: the credential is only checked at the top of the request, before the revoke runs. DELETE is naturally idempotent by HTTP semantics — this route does not use the Idempotency-Key ledger.

Authorization

bearerAuth
headerAuthorizationBearer <token>

A gid_ API key (Profile → API Keys) or an OAuth 2.1 access token.

Path Parameters

key_id*string

Response Body

The key was revoked.

application/json
  1. response

Confirmation that a key was revoked and can no longer authenticate.

id*string

The id of the revoked key.

legacy*boolean

True when the revoked key was a legacy row (soft-revoked); false for a plugin key (deleted).

Example Request
curl -X DELETE 'https://app.nowgetitdone.com/v1/api-keys/string'
Example Response
{  "id": "string",  "legacy": true}

Create an API key POST

Mints a new org-owned API key. Beyond the api-keys:manage scope check, the CALLING credential's creator must currently hold an owner/admin membership in the…

List task attachments GET

Cursor-paginated attachments of the task's CURRENT version, newest first (metadata only — mint download URLs per attachment via the download-url endpoint).