---
slug: api-keys-rotieren
title: "How do I rotate or revoke a key?"
category: konto
locale: en
updated: 2026-10-12
keywords: ["key","rotate","revoke","API key","security"]
questions: ["What do I do if a key was published by accident?","Withdraw a key","Rotate a key","Server key compromised"]
url: https://bench.metrunio.com/en/help/api-keys-rotieren
---

# How do I rotate or revoke a key?

**What do I do if a key was published by accident?**

You renew the write key and the server key in “Setup”, the server key on the “Server Events API” tab, where you can also revoke it. Read keys are revoked under “Exports & AI connections”, in the “API access” section, where you also create a new one. A new key is shown in full only once, and the old one stops working immediately.

1. Write key: open “Setup” and choose “Create a new write key” at the snippet.
2. Server key: open “Setup”, tab “Server Events API”, and choose “Create a new server key” or “Revoke”.
3. Read key: open “Exports & AI connections”, section “API access”, revoke the old one and create a new one.
4. Copy the new value immediately, enter it in every system that uses it and check that data arrives again. The old key is already invalid.

> **Caution:** The new key is shown in full only once; afterwards only a prefix remains visible, because keys are stored hashed. Plan the rotation so the switch happens without a gap.

## Also asked

- Withdraw a key
- Rotate a key
- Server key compromised

## Related

- https://bench.metrunio.com/en/help/site-id-und-write-key
- https://bench.metrunio.com/en/help/mcp-anbinden
- https://bench.metrunio.com/en/help/sicherheit-architektur