[BUG] API Key Deletion Causes Complete Loss of Machine Registration and Credit History

[cutepawss]

Environment

• Portal: https://fabric.openmind.org/my-devices

Description

After I deleted my compromised API key from the OpenMind portal, the associated machine registration data and credit usage history were permanently deleted instead of being preserved.

Steps to Reproduce

1. Register a machine with an API key on https://portal.openmind.org
2. Use the machine with the API key (accumulate credit usage)
3. Delete the API key from the portal (e.g., due to security compromise)
4. Observe that the OM Agent and its credit history disappear on https://fabric.openmind.org

Expected Behavior

• API key should be invalidated/revoked
• Machine registration history should be preserved (marked as inactive)
• Credit usage history should remain visible for accounting purposes

Actual Behavior

• API key is deleted
• Machine completely disappears from the portal
• Credit usage history is lost
• Total credits displayed becomes inaccurate

Evidence

After API key deletion:

Metric	Expected	Actual
Active Machines	0/2	0/1 (one machine completely missing)
Total Credits Used	1000+	703 (300+ credits lost with deleted machine)

What's missing:

• Second registered machine - completely gone from portal
• 300+ credits used by that machine - not reflected in total

Proposed Fix

Implement soft-delete: Revoke API key → Mark machines as "Inactive" → Preserve all history

Severity

High - Data loss affecting user accounts and credit tracking

[Prachi1615]

hi @cutepawss
Thanks for bringing this up. We will take a look.

[cutepawss]

hi @Prachi1615 have you able to check? cause I still can't see my lost credits and machine.

[Prachi1615]

We will let you know once we implement this.