#Orphaned SHARED API_KEY accounts — can't delete (403)

5 messages · Page 1 of 1 (latest)

jade mantle
#

Hey — I tried to open a support ticket through the Composio dashboard, but the ticket panel doesn't work (can't submit / create tickets there), so I'm reaching out here instead.

We need help removing two orphaned SHARED connected accounts from our project after the May security incident. Both are API_KEY integrations (Amplitude and Ahrefs). We're already rotating the credentials directly with those providers per your guidance, but we still need the Composio records gone.

Our project API key can see the accounts but can't delete them — DELETE returns 403 (creator-only for SHARED), revoke doesn't work for API_KEY, and there's no delete option in the dashboard. We also can't figure out which userId created them — they don't match our integration setup.

Could you hard-delete them on your side, or point us to the right way to clean this up as a project admin?

Happy to share more technical details in thread if needed. Thanks!

gaunt juniper
#

hey @jade mantle the dashboard is back online, you should be able to create and delete API keys now.

#

let me know if you run into problems

jade mantle
#

{
"error": {
"message": "No authentication provided",
"code": 10401,
"slug": "HTTP_Unauthorized",
"status": 401,
"request_id": "99accb02-9f9c-4b4c-aa1e-629a2fd921ef",
"suggested_fix": "Please check you are using a valid API key."
}
}

@gaunt juniper

jade mantle
#

@gaunt juniper ??