Revocation of unused API keys on 10/24

Starting October 24, 2026, Baseten will automatically revoke API keys that haven’t authenticated a request in 30 days. This change is part of our ongoing work to strengthen workspace security and reduce the risk from possible leaks of unused credentials. Keys that remain unused for 30 days will continue to be revoked on an ongoing basis.

Revoked keys cannot be restored. Requests using a revoked key will fail authentication.

For more information, see our documentation.