This Key Will Self-Destruct: An Open Standard for Revocable API Keys

A proposed open standard aims to make revocable API keys the default, allowing leaked credentials to become invalid within a short time frame. The goal is for every leaked credential to be unusable within sixty seconds of being discovered. This approach is intended to mitigate the damage caused by leaked credentials. The standard is designed to make it possible to revoke API keys quickly and efficiently.