# ApiKeyAnomalyAction

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

What the platform does when a key is used from a source its history does not account for.

## Values

| Value | Description |
| --- | --- |
| `LogOnly` | Write the detection to the security log and the metrics and do nothing else. The default, and what a deployment should stay on until its own traffic has been looked at. |
| `Notify` | Log it and tell the key's owner. The key keeps working: the person who can tell a new office from a stolen credential is the one holding it, so this asks them rather than deciding. |
| `Suspend` | Log it, tell the owner, and put the key into Suspended so it stops authenticating until somebody reinstates it. Containment ahead of confirmation, which is the right trade only for a merchant that has decided a stalled integration costs less than a credential in the wrong hands. |

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.