> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iterapay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke API Token

If you suspect your API token has been compromised, or if your internal security policies require key rotation, you must revoke your current token.

*Note: You can only have one active API token at a time. To generate a new one, you must first revoke the existing one.*

Follow these steps to revoke a token:

1. In the **Developers** tab, locate your *Active API token* block.
2. Click the **Revoke token** button (trash bin icon) in the top right corner of the block.

<Frame>
  <img src="https://mintcdn.com/red-b9883948/QmvWMdaFew2nV8lR/images/screen-55.png?fit=max&auto=format&n=QmvWMdaFew2nV8lR&q=85&s=f5dc6be89c30c62959577d3fe8fd1248" alt="Screen 55" width="2392" height="1346" data-path="images/screen-55.png" />
</Frame>

3. A confirmation modal will appear.
   * ⚠️ **Warning: Destructive Action.** Revoking this token will immediately break any active integrations and API calls currently using it. This action cannot be undone.
4. If you are certain you want to proceed, click the red **Revoke** button to permanently delete the token.

Once the token is revoked, your API access will be restricted until you generate a new API token.

/