UpdateMyKey replaces the scope set of a caller-owned management key in place, so an existing key can be re-scoped without rotating its secret.
Usage:
tare api keys set-scopes <key_id> [flags]
Flags:
--clear-platform-roles When true, removes all platform roles from the key.
--clear-scopes When true, replaces the key's scopes with the caller's current read or admin compatibility grant.
--clear-tags clear_tags: true When true, removes every tag from the key first; tags (if any) are then re-added on top, so clear_tags: true + a non-empty `tags` is equivalent to a full replace.
Global Flags:
--base-url string override the active profile's base URL for this invocation
-o, --output string output format: json (default "json")
-p, --profile string credential profile (overrides AGENTROUTER_PROFILE / active)
-q, --quiet Suppress progress output; only errors and the final summary go to stderr
-v, --verbose Verbose output: plain-mode progress lines plus full per-blob chunk logs to stderr