standard

ORKS

Draft open specification for API keys that encode their issuer's domain and can be revoked through a discoverable, unauthenticated endpoint, with an optional quarantine period before the key dies.

Known aliases

Open Revocable Key Standard

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Draft ORKS spec hands revocation of a leaked API key to whoever finds it

Plain API keys leak more than any other credential and still have no standard kill switch, so a draft called ORKS copies OAuth's discoverable revocation endpoint and lets the person who found the key pull it.

Publishers:securityweek.com

Reality

Evidence45
Adoption5
Hype gap+20
Incentives60
Confidence50