API Key Auto-Deletion After 90 Days of Inactivity

By Sparkforge Support Team ·Last reviewed May 3, 2026

Agency and sub-account API keys that go unused for 90 days are deleted automatically once per quarter. Admins get in-app notices at 15, 7, and 1 day before deletion, plus an email at 15 days.

To reduce stale credential risk, Sparkforge automatically deletes API keys that have not been used in the previous 90 days. The deletion runs quarterly and applies to both agency and sub-account keys.

How the policy works

Inactivity window: 90 days without a successful API call.
Cadence: automated sweep once per quarter.
Scope: both agency keys and sub-account keys.

Notifications you will receive

Before any key is deleted, Sparkforge sends a series of warnings:

15 days out: in-app notification to impacted agency and sub-account admins, plus an email to agency admins (including those whose locations are impacted) with a full deletion summary.
7 days out: second in-app notification.
1 day out: third in-app notification, plus a 24-hour banner in impacted agency and sub-account dashboards.

How to keep a key active

Make at least one successful API call with the key inside the 90-day window. If a key is no longer needed, delete it manually so you don't accumulate stale credentials.

Frequently Asked Questions

How long can an API key sit unused before Sparkforge deletes it?

90 days. If a key has not been used to make an API call in the last 90 days, it's eligible for the next quarterly auto-deletion sweep.

Will I be warned before an API key is deleted?

Yes. Admins get in-app notifications at 15 days, 7 days, and 1 day before deletion. Agency admins also get an email at 15 days, and a 24-hour banner appears the day before.

Does this apply to agency keys, sub-account keys, or both?

Both. Any agency or sub-account API key that hits 90 days of inactivity is included in the next sweep.

How do I prevent a key I still need from being deleted?

Make at least one successful API call with that key inside the 90-day window. Any valid API request resets the inactivity counter.