Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt

Use this file to discover all available pages before exploring further.

This guide shows how to revoke access keys in Cloud Console and with the Object Storage API.

​
Prerequisites

  • You must be signed in as a user who has the Object Storage Admin IAM role (or equivalent legacy access, such as membership in the admin group).
  • You must have an AI Object Storage Access Key to revoke.

​
Revoke keys in Cloud Console

  1. Navigate to the Access Keys page in the Cloud Console.
  2. Use the Search function to find keys by name or principal. Object Storage Keys
  3. Click the More menu on the right of the key you want to revoke.
  4. Click Revoke.
  5. In the Revoke Key modal, type the ID of the key you want to revoke and click Revoke.

​
Revoke keys with the Object Storage API

The Object Storage API provides endpoints to revoke individual Access Keys, or all keys associated with a principal.

​
Revoke an individual access key

To revoke an access key, first create a JSON object that specifies the key ID. Replace [ACCESS-KEY-ID] with the ID of the key to revoke.
data.json
{
  "accessKey": "[ACCESS-KEY-ID]"
}
Then, submit the request to the /revoke-access-key/access-key endpoint with the JSON object in the body. Replace [API-ACCESS-TOKEN] with your API access token.
Example request
curl -X POST https://api.coreweave.com/v1/cwobject/revoke-access-key/access-key \
       -H "Content-Type: application/json" \
       -H "Authorization: Bearer [API-ACCESS-TOKEN]" \
       -d @data.json
A successful response returns an empty object and the key is revoked.
Response status code 200
{}

​
Revoke all Access Keys for a principal

To revoke all Access Keys for a principal, create a JSON object that specifies the principal name. Replace [PRINCIPAL-NAME] with the principal whose keys you want to revoke (for example, coreweave/user-uid or saml/user@example.com).
data.json
{
  "principalName": "[PRINCIPAL-NAME]"
}
Then, submit the request to the /revoke-access-key/principal endpoint with the JSON object in the body. Replace [API-ACCESS-TOKEN] with your API access token.
Example request
curl -X POST https://api.coreweave.com/v1/cwobject/revoke-access-key/principal \
       -H "Content-Type: application/json" \
       -H "Authorization: Bearer [API-ACCESS-TOKEN]" \
       -d @data.json
A successful response returns an empty object and all keys for the principal are revoked.
Response status code 200
{}
Last modified on March 24, 2026