Key revocation
Last verified
Key revocation invalidates a credential at the provider. Every subsequent request with it fails with 401. There is no undo.
The thing people get wrong: deleting the commit, rewriting git history, or removing the key from your config does not revoke it. The credential remains valid until the provider is told otherwise. I committed an API key to GitHub.
Revocation is also an outage for everything using that key, which is correct during an incident and worth planning around otherwise.