WritingBasetenBasetenpublished Oct 23, 2026seen 1d

Upcoming Automatic Revocation Of Unused Api Keys

Open original ↗

Captured source

source ↗
published Oct 23, 2026seen 1dcaptured 1dhttp 200method plain

Upcoming automatic revocation of unused API keys Live webinar Oct 28: How to evaluate open models for your coding agents . Save your spot

changelog / post

Upcoming automatic revocation of unused API keys

Oct 23, 2026 Go back

Starting November 5, 2026 , Baseten will automatically revoke API keys that haven’t authenticated a request in 90 days. This change is part of our ongoing work to strengthen workspace security and reduce the risk from unused credentials. Keys that remain unused for 90 days will continue to be revoked on an ongoing basis. Before enforcement begins, review the last-used timestamp for each key on your API keys page . Rotate any keys used by infrequent workloads and update those workloads with the replacement keys. If your team provisions keys through automation, review those workflows as well. Revoked keys cannot be restored. Requests using a revoked key will fail authentication. For more information, see our documentation .

Explore Baseten today Start deploying Talk to an engineer

Popular models mammoth-1

elephant-1

Muse Spark Open

DeepSeek V4.1 Flash 1017

GLM-5.3 Fast

GLM-5.3-Flash

Explore all

Popular models mammoth-1

elephant-1

Muse Spark Open

DeepSeek V4.1 Flash 1017

GLM-5.3 Fast

GLM-5.3-Flash

Explore all

Notability

notability 2.0/10

routine API security notice