Automated API key expiration for standard accounts

Polygon.io provides API keys for programmatic data access, but the documentation currently lacks a native mechanism to set automatic expiration dates for keys within standard accounts. Keys appear to remain valid until manually revoked or rotated, which presents challenges for credential lifecycle management.

The goal is to determine if there is an undocumented configuration or header-based constraint that allows a key to expire after a set duration. Without this, developers must build external rotation logic to ensure security compliance, or the functionality might be restricted to enterprise-level security tiers.

Is there a configuration setting to define a TTL (Time-to-Live) for API keys? Can the system be instructed to invalidate a key after a specific timeframe without manual intervention?